--- znc-0.076.orig/debian/copyright +++ znc-0.076/debian/copyright @@ -0,0 +1,109 @@ +Name: znc +Maintainer: Patrick Matthäi +Source: http://znc.sourceforge.net/ + +Files: * +Copyright: Prozac , + Jim Hull , + crox, and Uli Schlachter . +License: GPL-2 | other + On Debian systems, the complete text of the GPL can be found in the file + /usr/share/common-licenses/GPL-2. + . + In addition, as a special exception, the copyright holders give + permission to link the code of portions of this program with the + OpenSSL library under certain conditions as described in each + individual source file, and distribute linked combinations + including the two. + You must obey the GNU General Public License in all respects + for all of the code used other than OpenSSL. If you modify + file(s) with this exception, you may extend this exception to your + version of the file(s), but you are not obligated to do so. If you + do not wish to do so, delete this exception statement from your + version. If you delete this exception statement from all source + files in the program, then also delete it here. + +Files: MD5.* +Copyright: (C) 2001-2003 Christophe Devine +License: GPL-2+ + On Debian systems, the complete text of the GPL can be found in the file + /usr/share/common-licenses/GPL-2. + . + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + . + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + . + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + +Files: SHA256.* +Copyright: (C) 2005, 2007 Olivier Gay +License: BSD-C3 + On Debian systems, the complete text of the BSD (3 clause) can be found in + the file /usr/share/common-licenses/BSD. + . + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + 3. Neither the name of the project nor the names of its contributors + may be used to endorse or promote products derived from this software + without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + SUCH DAMAGE. + +Files: Csocket.* +Copyright: (C) 1999-2007 Jim Hull +License: other + Uses a modified version of Sleepycat's license, namely: + . + Redistribution and use in source and binary forms, with or without modification, + are permitted provided that the following conditions are met: + Redistributions of source code must retain the above copyright notice, this + list of conditions and the following disclaimer. + Redistributions in binary form must reproduce the above copyright notice, this list + of conditions and the following disclaimer in the documentation and/or other materials + provided with the distribution. + Redistributions in any form must be accompanied by information on how to obtain + complete source code for the DB software and any accompanying software that uses the DB software. + The source code must either be included in the distribution or be available for no more than + the cost of distribution plus a nominal fee, and must be freely redistributable + under reasonable conditions. For an executable file, complete source code means the source + code for all modules it contains. It does not include source code for modules or files + that typically accompany the major components of the operating system on which the executable file runs. + . + THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, + BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, + OR NON-INFRINGEMENT, ARE DISCLAIMED. IN NO EVENT SHALL SLEEPYCAT SOFTWARE BE LIABLE FOR ANY DIRECT, + INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, + PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR + TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, + EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +Files: debian/* +Copyright: Patrick Matthäi +License: GPL-2 + On Debian systems, the complete text of the GPL can be found in the file + /usr/share/common-licenses/GPL-2 --- znc-0.076.orig/debian/watch +++ znc-0.076/debian/watch @@ -0,0 +1,2 @@ +version=3 +http://sf.net/znc/znc-([\d.]*)\.tar\.gz --- znc-0.076.orig/debian/control +++ znc-0.076/debian/control @@ -0,0 +1,136 @@ +Source: znc +Section: net +Priority: optional +Build-Depends: debhelper (>= 5), libssl-dev, libperl-dev, libc-ares-dev, + pkg-config, tcl8.5-dev, libsasl2-dev +Maintainer: Patrick Matthäi +Standards-Version: 3.8.3 +Homepage: http://znc.sourceforge.net/ + +Package: znc +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Recommends: znc-tcl, znc-perl, znc-extra +Conflicts: znc-extra (<< ${binary:Version}) +Suggests: znc-webadmin +Description: an advanced IRC bouncer + znc is an IRC proxy. It runs as a daemon and connects to IRC server, + then allows you to connect from a workstation and work as the user that + is logged in to the IRC server. After you disconnect, it maintains the + connection to the server. It acts like any normal IRC server, so you can + use any IRC client to connect to it. + . + Some of its features include support for multiple users, multiple clients, + and multiple IRC servers; playback buffers to catch up with what happened + while you were detached, SSL encryption, DCC proxying, and a plugin + interface with many plugins supporting other features. + +Package: znc-extra +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Recommends: znc (= ${binary:Version}) +Description: extra modules for znc + znc is an IRC proxy. It runs as a daemon and connects to IRC server, + then allows you to connect from a workstation and work as the user that + is logged in to the IRC server. After you disconnect, it maintains the + connection to the server. It acts like any normal IRC server, so you can + use any IRC client to connect to it. + . + Some of its features include support for multiple users, multiple clients, + and multiple IRC servers; playback buffers to catch up with what happened + while you were detached, SSL encryption, DCC proxying, and a plugin + interface with many plugins supporting other features. + . + This package contains extra modules for znc, some of them may not be stable. + +Package: znc-dbg +Section: debug +Architecture: any +Priority: extra +Depends: ${misc:Depends}, znc (= ${binary:Version}) | znc-perl (= ${binary:Version}) | + znc-webadmin (= ${binary:Version}) | znc-extra (= ${binary:Version}) +Conflicts: znc-extra-dbg (<= 0.074) +Description: an advanced IRC bouncer (debugging symbols) + znc is an IRC proxy. It runs as a daemon and connects to IRC server, + then allows you to connect from a workstation and work as the user that + is logged in to the IRC server. After you disconnect, it maintains the + connection to the server. It acts like any normal IRC server, so you can + use any IRC client to connect to it. + . + Some of its features include support for multiple users, multiple clients, + and multiple IRC servers; playback buffers to catch up with what happened + while you were detached, SSL encryption, DCC proxying, and a plugin + interface with many plugins supporting other features. + . + This package contains the debugging symbols of the znc package and his modules. + +Package: znc-dev +Architecture: any +Depends: ${misc:Depends}, znc (>= ${binary:Version}), libssl-dev +Description: an advanced IRC bouncer (development headers) + znc is an IRC proxy. It runs as a daemon and connects to IRC server, + then allows you to connect from a workstation and work as the user that + is logged in to the IRC server. After you disconnect, it maintains the + connection to the server. It acts like any normal IRC server, so you can + use any IRC client to connect to it. + . + Some of its features include support for multiple users, multiple clients, + and multiple IRC servers; playback buffers to catch up with what happened + while you were detached, SSL encryption, DCC proxying, and a plugin + interface with many plugins supporting other features. + . + This package contains the znc development headers for developing modules. + +Package: znc-perl +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Recommends: znc +Description: an advanced IRC bouncer (Perl extension) + znc is an IRC proxy. It runs as a daemon and connects to IRC server, + then allows you to connect from a workstation and work as the user that + is logged in to the IRC server. After you disconnect, it maintains the + connection to the server. It acts like any normal IRC server, so you can + use any IRC client to connect to it. + . + Some of its features include support for multiple users, multiple clients, + and multiple IRC servers; playback buffers to catch up with what happened + while you were detached, SSL encryption, DCC proxying, and a plugin + interface with many plugins supporting other features. + . + This package contains the znc Perl extension. + +Package: znc-tcl +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Recommends: znc +Description: an advanced IRC bouncer (Tcl extension) + znc is an IRC proxy. It runs as a daemon and connects to IRC server, + then allows you to connect from a workstation and work as the user that + is logged in to the IRC server. After you disconnect, it maintains the + connection to the server. It acts like any normal IRC server, so you can + use any IRC client to connect to it. + . + Some of its features include support for multiple users, multiple clients, + and multiple IRC servers; playback buffers to catch up with what happened + while you were detached, SSL encryption, DCC proxying, and a plugin + interface with many plugins supporting other features. + . + This package contains the znc Tcl extension. + +Package: znc-webadmin +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Recommends: znc +Description: an advanced IRC bouncer (webadmin module) + znc is an IRC proxy. It runs as a daemon and connects to IRC server, + then allows you to connect from a workstation and work as the user that + is logged in to the IRC server. After you disconnect, it maintains the + connection to the server. It acts like any normal IRC server, so you can + use any IRC client to connect to it. + . + Some of its features include support for multiple users, multiple clients, + and multiple IRC servers; playback buffers to catch up with what happened + while you were detached, SSL encryption, DCC proxying, and a plugin + interface with many plugins supporting other features. + . + This package contains the webadmin module. --- znc-0.076.orig/debian/README.Debian +++ znc-0.076/debian/README.Debian @@ -0,0 +1,11 @@ +To get started using znc, run "znc --makeconf" to interactively create a +configuration file (~/.znc/configs/znc.conf). There is also an example +config file in /usr/share/doc/znc/examples/znc.conf.gz + +Once you have znc set up, you may want to start the daemon on boot, with +this in a user's crontab: +@reboot znc + +To connect to znc from your irc client, you will use a command like this: +/server : +Note that the username and password are sent as the irc server password. --- znc-0.076.orig/debian/znc-extra.install +++ znc-0.076/debian/znc-extra.install @@ -0,0 +1,20 @@ +debian/tmp/usr/lib/znc/droproot.so usr/lib/znc/ +debian/tmp/usr/lib/znc/notify_connect.so usr/lib/znc/ +debian/tmp/usr/lib/znc/motdfile.so usr/lib/znc/ +debian/tmp/usr/lib/znc/log.so usr/lib/znc/ +debian/tmp/usr/lib/znc/blockuser.so usr/lib/znc/ +debian/tmp/usr/lib/znc/antiidle.so usr/lib/znc/ +debian/tmp/usr/lib/znc/listsockets.so usr/lib/znc/ +debian/tmp/usr/lib/znc/connect_throttle.so usr/lib/znc/ +debian/tmp/usr/lib/znc/discon_kick.so usr/lib/znc/ +debian/tmp/usr/lib/znc/fixfreenode.so usr/lib/znc/ +debian/tmp/usr/lib/znc/fakeonline.so usr/lib/znc/ +debian/tmp/usr/lib/znc/adminlog.so usr/lib/znc/ +debian/tmp/usr/lib/znc/send_raw.so usr/lib/znc/ +debian/tmp/usr/lib/znc/route_replies.so usr/lib/znc/ +debian/tmp/usr/lib/znc/buffextras.so usr/lib/znc/ +debian/tmp/usr/lib/znc/lastseen.so usr/lib/znc/ +debian/tmp/usr/lib/znc/autoreply.so usr/lib/znc/ +debian/tmp/usr/lib/znc/ctcpflood.so usr/lib/znc/ +debian/tmp/usr/lib/znc/autovoice.so usr/lib/znc/ +debian/tmp/usr/lib/znc/saslauth.so usr/lib/znc/ --- znc-0.076.orig/debian/compat +++ znc-0.076/debian/compat @@ -0,0 +1 @@ +5 --- znc-0.076.orig/debian/rules +++ znc-0.076/debian/rules @@ -0,0 +1,61 @@ +#!/usr/bin/make -f + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + +# These are used for cross-compiling and for saving the configure script +# from having to guess our platform (since we know it already) +DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) +DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) + +# Add the Debian revision to the CXXFLAGS and build it with debugging symbols. +CXXFLAGS := -g -DVERSION_EXTRA=\\\"+deb$(shell head -1 debian/changelog | sed 's/.*(//;s/).*//;s/.*-//')\\\" + +build: build-stamp +build-stamp: + dh_testdir + CXXFLAGS="$(CXXFLAGS)" ./configure --host=$(DEB_HOST_GNU_TYPE) \ + --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --enable-tcl \ + --enable-extra --enable-sasl + $(MAKE) + touch build-stamp + +clean: + dh_testdir + dh_testroot + rm -f build-stamp + dh_clean + [ ! -f Makefile ] || $(MAKE) -i distclean + rm -rf $(CURDIR)/debian/tmp + +install: build + dh_testdir + dh_testroot + dh_clean -k + $(MAKE) install DESTDIR=$(CURDIR)/debian/tmp + +binary-indep: build install + +binary-arch: build install + dh_testdir -a + dh_testroot -a + dh_install -a --list-missing + dh_installdocs -a + dh_installexamples -a + dh_installchangelogs -a + dh_strip -a --dbg-package=znc-dbg + dh_compress -a + dh_fixperms -a + dh_installdeb -a + dh_shlibdeps -a + dh_gencontrol -a + dh_md5sums -a + dh_builddeb -a + +get-orig-source: + @@dh_testdir + @@[ -d ../tarballs/. ]||mkdir -p ../tarballs + @@uscan --force-download --destdir ../tarballs + +binary: binary-indep binary-arch +.PHONY: build clean binary-indep binary-arch binary --- znc-0.076.orig/debian/znc-tcl.install +++ znc-0.076/debian/znc-tcl.install @@ -0,0 +1,2 @@ +debian/tmp/usr/lib/znc/modtcl.so usr/lib/znc/ +debian/tmp/usr/share/znc/modtcl usr/share/znc/ --- znc-0.076.orig/debian/znc-dev.install +++ znc-0.076/debian/znc-dev.install @@ -0,0 +1,6 @@ +debian/tmp/usr/include/znc usr/include/ +debian/tmp/usr/lib/pkgconfig/* usr/lib/pkgconfig/ +debian/tmp/usr/bin/znc-buildmod usr/bin/ +debian/tmp/usr/bin/znc-config usr/bin/ +debian/tmp/usr/share/man/man1/znc-buildmod.1.gz usr/share/man/man1/ +debian/tmp/usr/share/man/man1/znc-config.1.gz usr/share/man/man1/ --- znc-0.076.orig/debian/changelog +++ znc-0.076/debian/changelog @@ -0,0 +1,478 @@ +znc (0.076-1~bpo50+1) lenny-backports; urgency=low + + * Rebuild for lenny-backports. + + -- Patrick Matthäi Tue, 24 Nov 2009 19:19:09 +0100 + +znc (0.076-1) unstable; urgency=low + + * New upstream release. + + -- Patrick Matthäi Fri, 25 Sep 2009 08:07:42 +0200 + +znc (0.076~rc1-1) unstable; urgency=low + + * New upstream release candidate. + * Fix long description of znc-extra. Tcl is not anymore part of it. + * Enable building of the saslauth module with patch from Miguelangel Jose + Freitas Loreto and install it to the znc-extra package. + Closes: #547333 + + -- Patrick Matthäi Mon, 21 Sep 2009 11:26:15 +0200 + +znc (0.076~beta1-1) unstable; urgency=low + + * New upstream beta release. + - znc-extra has been merged in the main znc tree. Build and install them to + the new znc-extra package. + - Install the Tcl module to the znc-tcl package. + * s/perl/Perl/ in long description of the znc-perl package. + * Conflict again the old znc-extra-dbg package at znc-dbg. + * Use dh_install with --list-missing, so I do not forget an module. + * Bump Standards-Version to 3.8.3 (no changes needed). + * Add missing licenses. + + -- Patrick Matthäi Sun, 13 Sep 2009 12:27:48 +0200 + +znc (0.074-2) unstable; urgency=low + + * Merge 0.045-3+etch2, 0.045-3+etch3, 0.074-1~bpo40+1 and 0.074-1~bpo50+1 + changelog. + * Add versioned recommends on znc-extra. + Closes: #541305 + + -- Patrick Matthäi Thu, 13 Aug 2009 18:59:00 +0200 + +znc (0.074-1~bpo50+1) lenny-backports; urgency=low + + * Rebuild for lenny-backports. + + -- Patrick Matthäi Tue, 04 Aug 2009 18:02:00 +0200 + +znc (0.074-1~bpo40+1) etch-backports; urgency=low + + * Rebuild for etch-backports. + - Drop libc-ares-dev build dependency, we do not have it on Etch. + - Also disable it in debian/rules. + + -- Patrick Matthäi Tue, 04 Aug 2009 18:10:55 +0200 + +znc (0.074-1) unstable; urgency=high + + * New upstream release. + - Bump urgency to high. This release fixes an high-impact directory + traversal buf, where unpriviliged users can save about DCC SEND files on + the server with the rights of the znc process. The attacker could also + use the exploit to get a shell on the server. + Closes: #537977 + - Use c-ares for DNS resolving, add libc-ares-dev and pkg-config as + build-dependency. + * Merge 0.058-2+lenny2, 0.058-2+lenny3, 0.070-1~bpo40+1 and 0.070-1~bpo50+1 + changelog. + * Bump Standards-Version to 3.8.2 (no changes needed). + + -- Patrick Matthäi Fri, 24 Jul 2009 13:46:00 +0200 + +znc (0.070-1~bpo50+1) lenny-backports; urgency=low + + * Rebuild for lenny-backports. + * Remove recommend from znc to non-existent package znc-extra in Lenny. + + -- Patrick Matthäi Mon, 01 Jun 2009 11:49:09 +0200 + +znc (0.070-1~bpo40+1) etch-backports; urgency=low + + * Rebuild for etch-backports. + * Remove recommend from znc to non-existent package znc-extra in Etch. + + -- Patrick Matthäi Mon, 01 Jun 2009 11:46:00 +0200 + +znc (0.070-1) unstable; urgency=low + + * New upstream release. + - Add new pkgconfig files to znc-dev. + * Fix typo in get-orig-source target. + * Merge 0.058-2~bpo40+1 and 0.058-2~bpo40+2 changelog. + * Add recommends on the new source package znc-extra. + * Add my own copyright for the Debian packaging. + + -- Patrick Matthäi Sat, 23 May 2009 16:17:47 +0200 + +znc (0.068-3) unstable; urgency=low + + * Change my email address. + * Remove DM-Upload-Allowed control field. + * Add new fail2ban module. + + -- Patrick Matthäi Thu, 23 Apr 2009 13:27:00 +0200 + +znc (0.068-2) unstable; urgency=low + + * Add missing admin module. + Closes: #522267 + + -- Patrick Matthäi Thu, 2 Apr 2009 11:08:41 +0200 + +znc (0.068-1) unstable; urgency=low + + * New upstream release. + * Bump Standards-Version to 3.8.1 (no changes needed). + * Change section of znc-dbg to debug. + * Add changelog from the 0.058-2+lenny1 upload. + + -- Patrick Matthäi Sun, 29 Mar 2009 20:39:44 +0200 + +znc (0.066-1) unstable; urgency=high + + * New upstream release. + - Severity high because it fixes a critical security flaw. + Closes: #516950 + * znc-dev has to be arch:any, because it also gives back the used host + compiler. + + -- Patrick Matthäi Tue, 24 Feb 2009 18:21:42 +0200 + +znc (0.064-1) unstable; urgency=low + + * New upstream release. + * Add get-orig-source target. + * Add missing dependencie from znc-dev to libssl-dev. znc modules will not + build without libssl-dev. + * Fix link to the GPL file. + + -- Patrick Matthäi Tue, 17 Feb 2009 18:22:22 +0200 + +znc (0.062-2) unstable; urgency=low + + * Add missing ${misc:Depends}. Thanks lintian. + * Fix debian/watch, so that it does not take the new znc-extra tarball. + + -- Patrick Matthäi Sat, 6 Dec 2008 23:28:22 +0200 + +znc (0.062-1) unstable; urgency=low + + * New upstream release. + - Add new autocycle, keepnick and q modules. + - IPv6 is now enabled by default. + - Remove 01-fix-gcc4.4-ftbfs (merged upstream). + * Uploading to unstable. + + -- Patrick Matthäi Sat, 6 Dec 2008 14:24:45 +0200 + +znc (0.060-2) experimental; urgency=low + + * Add upstream patch from svn r1269 to fix a FTBFS with gcc 4.4. + Closes: #504946 + * Split up package to znc-dev, znc-perl and znc-webadmin to avoid on some + installations useless dependencies and the installation of the potential + more dangerous webadmin module - the user now has to install it manually. + * Provide debugging symbols in znc-dbg. + * Provide znc.conf as example and added some docs. + + -- Patrick Matthäi Mon, 17 Nov 2008 11:35:59 +0200 + +znc (0.060-1) experimental; urgency=low + + * New upstream release. + - Drop dpatch and applied patches - they have been merged in upstream. + + -- Patrick Matthäi Sat, 13 Sep 2008 19:18:59 +0200 + +znc (0.058-2+lenny3) stable-security; urgency=high + + * Fixes an high-impact directory traversal bug, where unprivileged users can + save about DCC SEND files on the server with the rights of the znc process. + The attacker could also use the exploit to get a shell on the server. + Closes: #537977 + + -- Patrick Matthäi Fri, 24 Jul 2009 10:59:59 +0200 + +znc (0.058-2+lenny2) stable; urgency=low + + * Add 03-crash-deleted-user.dpatch, which fixes a possible crash if users are + deleted. + If a user is deleted while it is trying to connect to an IRC server, the + IRC socket wasn't deleted together with the user. At some later point in + time, the IRC socket will try to use the user object, which was already + freed by now. + Closes: #536489 + * Change my email address. + + -- Patrick Matthäi Fri, 10 Jul 2009 12:20:16 +0200 + +znc (0.058-2+lenny1) stable-security; urgency=low + + * Add 02-webmin-priv-escalation.dpatch which properly handle newlines in + CHTTPSock::GetParam() and strip them out. This patch fixes an important + privilege escalation. + Closes: #516950 + + -- Patrick Matthäi Wed, 4 Mar 2009 11:55:21 +0200 + +znc (0.058-2~bpo40+2) etch-backports; urgency=high + + * Add 02-webmin-priv-escalation.dpatch which properly handle newlines in + CHTTPSock::GetParam() and strip them out. This patch fixes an important + privilege escalation. + Closes: #516950 + + -- Patrick Matthäi Wed, 11 Mar 2009 08:30:18 +0200 + +znc (0.058-2~bpo40+1) etch-backports; urgency=low + + * Rebuild for etch-backports. + + -- Patrick Matthäi Sun, 11 Jan 2009 12:38:24 +0200 + +znc (0.058-2) unstable; urgency=low + + * Implemented dpatch. + * Add 01-emb_perl-sys-init3.dpatch patch from upstream svn (r1155-r1158). + Closes: #495076 + * Merge debian/changelog from the stable 0.045-3+etch1 upload. + + -- Patrick Matthäi Sun, 17 Aug 2008 19:50:11 +0200 + +znc (0.058-1) unstable; urgency=high + + * New upstream release. + - Bumping urgency to high, because this release fixes a local privilege + escalation. For more informations see svn commit 1113 on the upstream + subversion repository. This bug does not exist in the stable version. + * Removed note on a not existing file in README.Debian. + * Removed the indefinite article "an" from the short description. + + -- Patrick Matthäi Thu, 10 Jul 2008 14:02:50 +0200 + +znc (0.056+svn1109-1) unstable; urgency=low + + * New upstream svn snapshot. + * Add VERSION_EXTRA CXXFLAGS which appends the Debian revision to the + internal version of znc. + + -- Patrick Matthäi Sat, 28 Jun 2008 11:35:47 +0200 + +znc (0.056+svn1093-1) unstable; urgency=low + + * New upstream svn snapshot. + - Manpages have been added. + Closes: #411500 + - The README now also describes two options which are unclear for most + users. + Closes: #411502 + - Drop dpatch. The patch has been applied by upstream. + - We do not need to fix the rights of modperl.pm anymore, fixed in svn. + * Bumped Standards-Version to 3.8.0 (no changes needed). + * Correct typo in the Files field for Csocket.cpp and Csocket.h. + Thanks psychon for reporting that. + + -- Patrick Matthäi Sat, 14 Jun 2008 18:27:01 +0100 + + +znc (0.045-3+etch3) oldstable-security; urgency=high + + * Fixes an high-impact directory traversal bug, where unprivileged users can + save about DCC SEND files on the server with the rights of the znc process. + The attacker could also use the exploit to get a shell on the server. + Closes: #537977 + * Change my email address, the old one is not reachable anymore. + + -- Patrick Matthäi Sat, 01 Aug 2009 20:23:03 +0200 + +znc (0.045-3+etch2) oldstable-security; urgency=low + + * Backported upstream patch from the 0.066 release which fixes the handling + of newlines in CHTTPSock::GetParam() and strip them out. This patch fixes + an important privilege escalation in the webadmin module. + Closes: #516950 + + -- Patrick Matthäi Wed, 4 Mar 2009 12:07:13 +0200 + +znc (0.045-3+etch1) stable; urgency=low + + * Set myself as new maintainer. + * Applied two patches from upstream which fixes two crash bugs: + - Crash bug when doing /nick while not connected to IRC (NULL pointer). + - Crash bug when using *status while not connected to IRC (NULL pointer). + + -- Patrick Matthäii Fri, 13 Jun 2008 21:49:31 +0100 + +znc (0.056-1) unstable; urgency=low + + * New upstream release. + * New maintainer. + Closes: #483248 + * Build znc with IPv6 support. + * Applied upstream patch from svn r1068 to de-bashify znc-buildmod. + * Dropped autotools-dev build depend. + * Removed Vcs-Git control field. + * Added DM-Upload-Allowed control field. + * Some debian/rules tweaks like cross compile support. + * Install modperl.pm without executable rights. + + -- Patrick Matthäi Sat, 31 May 2008 21:04:31 +0100 + +znc (0.054-4) unstable; urgency=low + + * Orphaned the package. + + -- Joey Hess Tue, 27 May 2008 18:34:09 -0400 + +znc (0.054-3) unstable; urgency=low + + * Convert znc-buildmod to a bash script so as to not need to worry about + bashisms (actually, nonportable echo -e's) in this script. Closes: #480621 + + -- Joey Hess Wed, 14 May 2008 19:46:43 -0400 + +znc (0.054-2) unstable; urgency=low + + * Remove some patches for things fixed upstream. Thanks to Robert Förster + for pointing them out. + + -- Joey Hess Sat, 19 Apr 2008 17:00:13 -0400 + +znc (0.054-1) unstable; urgency=low + + * New upstream release: + * Forward /names replies for unknown channels. + * Global modules can no longer hook into every config line, but only + those prefixed with 'GM:'. + * Don't forward topic changes for detached channels. + * Remove ~/.znc/configs/backups and instead only keep one backup under + znc.conf-backup. + * Update /msg *status help. + * Add --datadir to znc-config. + * Update bundled Csocket to the latest version. This fixes some bugs + (e.g. not closing SSL connections properly). + * Use $HOME if possible to get the user's home (No need to read + /etc/passwd anymore). + * Use -Wshadow and fix all those warnings. + * Add /msg *status ListAvailMods. Thanks to SilverLeo. + * Add OnRehashDone() module call. + * Add rehashing (SIGHUP and /msg *status rehash). + * Also write a pid file if we are compiled with --enable-debug. + Thanks to SilverLeo. + * Add ClearVHost and 'fix' SetVHost. Thanks to SilverLeo. + * Increase the connect timeout for IRC connections to 2 mins. + * Add a user's vhost to the list on the user page in webadmin. + * Add --no-color switch and only use colors if we are on a terminal. + * Add DenySetVHost config option. Thanks to Veit Wahlich aka cru. + * Change --makeconf's default for KeepNick and KeepBuffer to false. + * Add simple_away module. This sets you away some time after you + disconnect from ZNC. + * Don't write unneeded settings to the section. Thanks to SilverLeo. + * Remove OnFinishedConfig() module call. Use OnBoot() instead. + * Fix some GCC 4.3 warnings. Thanks to darix again. + * Move the static data (webadmin's skins) to /usr/share/znc per default. + Thanks to Marcus Rueckert aka darix. + * New znc-buildmod which works on shells other than bash. + * Add ClearAllChannelBuffers to *status. + * Handle CTCPs to *status. + * autoattach now saves and reloads its settings. + * Let webadmin use the user's defaults for new chans. Thanks to SilverLeo. + + -- Joey Hess Tue, 01 Apr 2008 13:13:12 -0400 + +znc (0.052-2) unstable; urgency=low + + * Add a Homepage field. + * Remove antiidle module, gone upsteam (bad merge before). + * Copyright file updates. + + -- Joey Hess Fri, 18 Jan 2008 13:34:27 -0500 + +znc (0.052-1) unstable; urgency=low + + * New upstream release: + * Added saslauth module. + * Add del command to autoattach. + * Make awaynick save its settings and restore them when it is loaded again. + * Added disconnect and connect commands to *status. + * CTCPReply = VERSION now ignores ctcp version requests (as long as no + client is attached). This works for every CTCP request. + * Add -W to our default CXXFLAGS. + * Remove save command from perform, it wasn't needed. + * Add list command to stickychan. + * --with-module-prefix=x now really uses x and not x/znc (Inspired by + CNU :) ). + * Use a dynamic select timeout (sleep until next cron runs). This should + save some CPU time. + * Fix NAMESX / UHNAMES, round two (multi-client breakage). + * Module API change (without any breakage): OnLoad gets sMessage instead + of sErrorMsg. + * Fix a mem-leak. + * Disable auto-rejoin on kick and add module kickrejoin. + * Respect $CXXFLAGS env var in configure. + * Removed some executable bits on graphiX' images. + * Added README file and removed docs/. + * Removed the antiidle module. + * Fixes for GCC 4.3 (Debian bug #417793). + * Some dead code / code duplications removed. + * Rewrote Makefile.ins and don't strip binaries anymore by default. + + -- Joey Hess Tue, 04 Dec 2007 13:12:15 -0500 + +znc (0.050-1) unstable; urgency=low + + * New upstream release: + * fixed UHNAMES bug (ident was messed up, wrong joins were sent) + * fixed /lusers bug (line was cached more than once) + * added disabled chans to the core + * send out a notice asking for the server password if client + doesn't send one + * added ConnectDelay config option + * added timestamps on the backlog + * added some module calls + * added basic traffic stats + * added usermodes support + * API breakage (CModule::OnLoad got an extra param) + * added fixed channels to the partyline module + * fixed partyline bugs introduced by last item + * fixed a NULL pointer dereference if /nick command was received from a + client while not connected to IRC + * added a JoinTries per-user config option which specifies how often we + try to rejoin a channel (default: 0 -> unlimited) + * make configure fail if it can't find openssl (or perl, ...) + * new modules: antiidle, nickserv + * znc-buildmod contains a bashish, run under bash. + + -- Joey Hess Mon, 27 Aug 2007 13:44:40 -0400 + +znc (0.047-2) unstable; urgency=low + + * Fix nostrip build. Closes: #438368 + + -- Joey Hess Thu, 16 Aug 2007 13:55:47 -0400 + +znc (0.047-1) unstable; urgency=low + + * New upstream release. + * Patch from tbm fixing FTBFS with gcc 4.3. Closes: #417793 + * Add a basic README.Debian. Closes: #411495 + + -- Joey Hess Mon, 14 May 2007 13:44:45 -0400 + +znc (0.045-3) unstable; urgency=high + + * Apply patch from CVS to fix a security hole that allowed a logged-in + user to get/put any accessible file on the host running znc, rather than + only files they should be allowed to access. Closes: #403141 + + -- Joey Hess Thu, 14 Dec 2006 17:08:30 -0500 + +znc (0.045-2) unstable; urgency=low + + * Fix FTBFS with gcc 4.2 which removes the deprecated >? operator. + Closes: #393993 + + -- Joey Hess Fri, 20 Oct 2006 16:23:17 -0400 + +znc (0.045-1) unstable; urgency=low + + * First release. + * Moved the modules from /usr/share/znc to /usr/lib/znc. + * Use recent config.sub and config.guess from autotools-dev. + * Added LICENSE and LICENSE.OpenSSL files from current upstream CVS. + + -- Joey Hess Thu, 14 Sep 2006 13:04:28 -0400 --- znc-0.076.orig/debian/znc.docs +++ znc-0.076/debian/znc.docs @@ -0,0 +1,2 @@ +AUTHORS +README --- znc-0.076.orig/debian/znc.install +++ znc-0.076/debian/znc.install @@ -0,0 +1,27 @@ +debian/tmp/usr/share/man/man1/znc.1.gz usr/share/man/man1/ +debian/tmp/usr/bin/znc usr/bin/ +debian/tmp/usr/lib/znc/admin.so usr/lib/znc/ +debian/tmp/usr/lib/znc/autoattach.so usr/lib/znc/ +debian/tmp/usr/lib/znc/autocycle.so usr/lib/znc/ +debian/tmp/usr/lib/znc/autoop.so usr/lib/znc/ +debian/tmp/usr/lib/znc/awaynick.so usr/lib/znc/ +debian/tmp/usr/lib/znc/away.so usr/lib/znc/ +debian/tmp/usr/lib/znc/chansaver.so usr/lib/znc/ +debian/tmp/usr/lib/znc/crypt.so usr/lib/znc/ +debian/tmp/usr/lib/znc/email.so usr/lib/znc/ +debian/tmp/usr/lib/znc/fail2ban.so usr/lib/znc/ +debian/tmp/usr/lib/znc/imapauth.so usr/lib/znc/ +debian/tmp/usr/lib/znc/keepnick.so usr/lib/znc/ +debian/tmp/usr/lib/znc/kickrejoin.so usr/lib/znc/ +debian/tmp/usr/lib/znc/nickserv.so usr/lib/znc/ +debian/tmp/usr/lib/znc/partyline.so usr/lib/znc/ +debian/tmp/usr/lib/znc/perform.so usr/lib/znc/ +debian/tmp/usr/lib/znc/q.so usr/lib/znc/ +debian/tmp/usr/lib/znc/raw.so usr/lib/znc/ +debian/tmp/usr/lib/znc/sample.so usr/lib/znc/ +debian/tmp/usr/lib/znc/savebuff.so usr/lib/znc/ +debian/tmp/usr/lib/znc/schat.so usr/lib/znc/ +debian/tmp/usr/lib/znc/shell.so usr/lib/znc/ +debian/tmp/usr/lib/znc/simple_away.so usr/lib/znc/ +debian/tmp/usr/lib/znc/stickychan.so usr/lib/znc/ +debian/tmp/usr/lib/znc/watch.so usr/lib/znc/ --- znc-0.076.orig/debian/znc-webadmin.install +++ znc-0.076/debian/znc-webadmin.install @@ -0,0 +1,2 @@ +debian/tmp/usr/lib/znc/webadmin.so usr/lib/znc/ +debian/tmp/usr/share/znc/webadmin usr/share/znc/ --- znc-0.076.orig/debian/znc-perl.install +++ znc-0.076/debian/znc-perl.install @@ -0,0 +1 @@ +debian/tmp/usr/lib/znc/modperl.* usr/lib/znc/ --- znc-0.076.orig/debian/znc.examples +++ znc-0.076/debian/znc.examples @@ -0,0 +1 @@ +znc.conf