Publishing details

• Published on 2011-03-13

Changelog

kvirc (4:4.0.0~svn3900+rc2-1ubuntu0.2~ppa1) lucid; urgency=low

  * SECURITY UPDATE: The IRC Protocol component in KVIrc 3.x and 4.x before
    r4693 does not properly handle \ (backslash) characters, which allows
    remote authenticated users to execute arbitrary CTCP commands via vectors
    involving \r and \40 sequences, a different vulnerability than CVE-2010-2451
    and CVE-2010-2452.
    - 33_upstream_security_#858.patch
      - Patch based on upstream SVN revision 4693.
    - CVE-2010-2785:
      - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2010-2785
    - LP: #612682
 -- Nathan Handler <email address hidden>   Sat, 12 Mar 2011 20:00:18 -0600

Builds

• amd64
• i386

Built packages

• kvirc KDE-based next generation IRC client with module support

• kvirc-data Data files for KVIrc

• kvirc-dbg KVIrc (IRC client) debugging symbols

Package files

• kvirc-data_4.0.0~svn3900+rc2-1ubuntu0.2~ppa1_all.deb (2.2 MiB)
• kvirc-dbg_4.0.0~svn3900+rc2-1ubuntu0.2~ppa1_amd64.deb (447.3 KiB)
• kvirc-dbg_4.0.0~svn3900+rc2-1ubuntu0.2~ppa1_i386.deb (446.3 KiB)
• kvirc_4.0.0~svn3900+rc2-1ubuntu0.2~ppa1.debian.tar.gz (33.5 KiB)
• kvirc_4.0.0~svn3900+rc2-1ubuntu0.2~ppa1.dsc (1.9 KiB)
• kvirc_4.0.0~svn3900+rc2-1ubuntu0.2~ppa1_amd64.deb (2.1 MiB)
• kvirc_4.0.0~svn3900+rc2-1ubuntu0.2~ppa1_i386.deb (1.9 MiB)
• kvirc_4.0.0~svn3900+rc2.orig.tar.bz2 (4.7 MiB)