Ubuntu
kphone package

[Edgy MoM] Please sync 4.2-6 from Debian

Bug #52340 reported by Tom Albers
This bug report is a duplicate of:  Bug #52250: please sync kphone from unstable. Edit Remove
2
Affects Status Importance Assigned to Milestone
kphone (Ubuntu)
Confirmed
Medium
Unassigned

Bug Description

The reason for a ubuntu version was a securetty issue:
---
kphone (1:4.2-3ubuntu1) dapper; urgency=low

  * SECURITY UPDATE: Fix config file information leak.
  * Add 02_CVE-2006-2192.dpatch
  * ~/.qt/kphonerc was world readable and contained the user's SIP password
  * References:
    CVE-2006-2192
    http://bugs.debian.org/337830
---

This is fixed in Debian so it seems:
---
  * Add debian/patches/umask.diff
    - Security problem in kphone (Closes: #337830)
---

Package builds in Edgy pbuilder.

http://merges.ubuntu.com/k/kphone/REPORT

Revision history for this message
Raphaël Pinson (raphink) wrote :

I confirm that this package builds fine in Edgy.

Changed in kphone:
importance: Untriaged → Medium
status: Unconfirmed → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.