Hi,

I have created an unofficial krusader-1.70.1 package on Debian Etch/amd64.
I have tried to use Vaclav Juza new built system that uses CDBS + other changes,
unfortunately i have run into some built problems, though i'm shure
that these new rules will give better results in the future.
Because fixing CVE-2006-3816 is more important i have updated/improved the
current rules files of krusader 1.70.0-1
You can check it at:
http://users.telenet.be/franks.website/downloads/krusader_1.70.1-1-etch0/

-------------------------
Changes:
krusader (1.70.1-1) unstable; urgency=high
.
  * New upstream release, fixes CVE-2006-3816 (Closes: #358664,
#380063, #378138)
  * Added some popular useractions to Useractions.xml (patch by Vaclav Juza)
  * Added patch rules (thanks to Jonathan Riddell,
Krusader-1.60.1-0ubuntu1 package)
  * Suggests updates
  * Using usr/share/applications/kde FreeDesktop.org standard, closes #378138
  * Added xmp icons to /usr/share/pixmaps
  * Added krusader-rootmode to debian menu (thanks to Vaclav Juza)
  * Removed dependency to gzip (essential package; lintian error)
  * Upgrade Standards-Version to 3.7.2, no changes needed
---------------------------

Please upload or NMU Krusader-1.70.1 in Sid/Etch, thanks!

ps.
I will try to understand why CDBS + other changes are causing some built
trouble on my machine.

kind regards,

Frank Schoolmeesters
http://www.krusader.org


On 7/27/06, Frank Schoolmeesters <[EMAIL PROTECTED]> wrote:
Subject: krusader: Security hole that is fixed in new upstream version 1.70.1
Package: krusader
Version: 1.70.0-1
Severity: important
Tags: security, patch


Hi,

Krusader-1.70.1 has been released!
http://krusader.sourceforge.net/phpBB/viewtopic.php?t=1665
Please add in the Debian Sid repository ASAP because it closes a security hole.

http://krusader.sourceforge.net/phpBB/viewtopic.php?t=1666
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3816
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3816
Krusader-1.70.1 also fixes some bugs that where backported from the development
version in cvs (the future krusader-1.80.0)


For Sid I propose todo the next changes in the debian dir.
1)
A much better Suggest than the current one.
Suggests: md5deep | cfv, kedit, khexedit, konsole, kmail, krename,
kdiff3 | kompare | xxdiff, ark, arj, bzip2, cpio, lha, unrar |
unrar-free | rar, rpm, unace, unzip, zip, p7zip, kdebase-bin ,
kdebase-kio-plugins

2)
Updated package description.
-----------
Description: Twin-panel (commander-style) File Manager for KDE and
other desktops in the *nix world
 Krusader is a simple, easy, powerful, twin-panel file manager
(commander-style) for KDE
 and other *nix desktops, similar to Midnight Commander(c) or Total
Commander(c).
 It provides all the file management features you could possibly want.
 Plus: extensive Archive handling, mounted Filesystem support, FTP,
advanced Search module,
 viewer/Editor, directory Synchronization, file content Comparisons,
powerful batch Renaming and
 much, much more. Supports archive formats: ace, arj, bzip2, deb, iso,
lha, rar, rpm, tar,
 zip and 7-zip. Handles other KIOSlaves such as smb:// or fish://.
 Almost completely customizable, Krusader is very user friendly, facile,
 and looks great on your desktop! :-)
----------

3)
Upgrade Standards-Version to 3.7.2 , No changes necessary

4)
IMHO bug #358664 can be closed, Krusader nor KDE is intented to run on
*old hardware*.



In attachment i have added "debian.tar.gz" , it's intendend for
krusader-cvs (the future krusader-1.80.0).
It contains many changes, i suppose you like to take a look at it.
It's created by me (i did some minor changes ;) and Vaclav Juza.

Also in attachment krusader_1.70.1-0sid0.clean.diff , it's a
*backport* of "debian.tar.gz" for krusader-1.70.1
Though some changes are needed here if you want to use it.
- Add turkish translation as a patch, must be removed, since it's
already included
- The 1-2-3,4 changes (see above) are not included in the diff



An unofficial backport for SARGE is created by me
http://krusader.sourceforge.net/downloads.php#stable
The source can be found at
http://users.telenet.be/franks.website/downloads/krusader-1.70.1-sarge0/
and also an unofficial package for SID by Vaclav Juza.


btw. my offer to become a krusader co-maintainer is still open.


kind regards,

Frank Schoolmeesters
http://www.krusader.org





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to