diff -u qtcreator-1.3.1/debian/changelog qtcreator-1.3.1/debian/changelog --- qtcreator-1.3.1/debian/changelog +++ qtcreator-1.3.1/debian/changelog @@ -1,3 +1,13 @@ +qtcreator (1.3.1-1ubuntu1.1) lucid-security; urgency=low + + * SECURITY UPDATE: insecure library loading (LP: #649991) + - bin/qtcreator: don't add an empty element to LD_LIBRARY_PATH, + based on patch from upstream. + - http://qt.gitorious.org/qt-creator/qt-creator/commit/3c00715c8e90c57953ec4a8716110f6954e524e4 + - CVE-2010-3374 + + -- Felix Geyer Tue, 28 Sep 2010 18:14:48 +0200 + qtcreator (1.3.1-1ubuntu1) lucid; urgency=low * Merge with Debian Experimental, remaining changes (LP: #536748): only in patch2: unchanged: --- qtcreator-1.3.1.orig/bin/qtcreator +++ qtcreator-1.3.1/bin/qtcreator @@ -31,6 +31,6 @@ bindir=`dirname "$me"` libdir=`cd "${bindir}/../lib" ; pwd` -LD_LIBRARY_PATH="${libdir}/qtcreator:${LD_LIBRARY_PATH}" +LD_LIBRARY_PATH="${libdir}/qtcreator${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}" export LD_LIBRARY_PATH exec "${bindir}/qtcreator.bin" ${1+"$@"}