diff -u qtcreator-1.2.1/debian/changelog qtcreator-1.2.1/debian/changelog --- qtcreator-1.2.1/debian/changelog +++ qtcreator-1.2.1/debian/changelog @@ -1,3 +1,13 @@ +qtcreator (1.2.1-3ubuntu1.1) karmic-security; urgency=low + + * SECURITY UPDATE: insecure library loading (LP: #649991) + - bin/qtcreator: don't add an empty element to LD_LIBRARY_PATH, + based on patch from upstream. + - http://qt.gitorious.org/qt-creator/qt-creator/commit/3c00715c8e90c57953ec4a8716110f6954e524e4 + - CVE-2010-3374 + + -- Felix Geyer Tue, 28 Sep 2010 18:30:43 +0200 + qtcreator (1.2.1-3ubuntu1) karmic; urgency=low * Merge from Debian unstable, remaining changes: only in patch2: unchanged: --- qtcreator-1.2.1.orig/bin/qtcreator +++ qtcreator-1.2.1/bin/qtcreator @@ -2,4 +2,4 @@ bindir=$(dirname "$(readlink -nf $0)") libdir=$(cd "${bindir}/../lib" ; pwd) -LD_LIBRARY_PATH="${libdir}/qtcreator:${LD_LIBRARY_PATH}" exec "${bindir}/qtcreator.bin" ${1+"$@"} +LD_LIBRARY_PATH="${libdir}/qtcreator${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}" exec "${bindir}/qtcreator.bin" ${1+"$@"}