[Pkg-kde-extras] Bug#503401: More info about the exploit. Current status.

[Raúl Sánchez Siles]

  Hello All:

  Jan, thanks a lot for this bug report. Indeed the problem is present in 
3.4.0 but not in 3.4.2. Unfortunately, 3.4.2 was not released in time to 
include it into Lenny.

  A fix was applied meanwhile: https://svn.kvirc.de/kvirc/changeset/1997 
fixing a bug, https://svn.kvirc.de/kvirc/ticket/97 which apparently was a 
different problem and wasn't tagged as too serious.

  Anyway, this bug just applies in the case that kvirc would be the default 
irc handler. So far, I think this is not the case in Debian, possible due to 
another bug. I'm still researching how this bug affects to Debian and it's 
severity. Up to now I haven't seen anything strange, but I guess I'm not 
triggering the bug yet.

  Having said this, I'm working in a patch for the bug, which I hope could be 
uploaded soon.

  Thanks.
-- 
     Raúl Sánchez Siles
----->Proud Debian user<-----
Linux registered user #416098
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url : http://lists.alioth.debian.org/pipermail/pkg-kde-extras/attachments/20081026/62165a11/attachment.pgp