Change logs for irssi source package in Intrepid

irssi (0.8.12-4ubuntu2.3) intrepid-security; urgency=low

  * debian/patches/91_ssl_proxy.patch: when we have a proxy setting, we expect
    the CN to match the proxy hostname, not the server hostname. Patch thanks
    to Steve Langasek. (LP: #565182)
 -- Jamie Strandboge <email address hidden>   Mon, 19 Apr 2010 13:02:15 -0500

irssi (0.8.12-4ubuntu2.2) intrepid-security; urgency=low

  * SECURITY UPDATE: perform certificate host validation
    - debian/patches/91_CVE-2010-1155.patch: adjust to verify hostname against
      CN. Also use one SSL_CTX per connection and use default trusted CAs if
      nothing specified.
    - CVE-2010-1155
  * SECURITY UPDATE: fix crash when checking for fuzzy nick match when not on
    the channel
    - debian/patches/91_CVE-2010-1156.patch: verify channel is non-NULL in
      src/core/nicklist.c
    - CVE-2010-1156
  * debian/patches/92_disable_sslv2.patch: do not use SSLv2 protocol
 -- Jamie Strandboge <email address hidden>   Wed, 14 Apr 2010 15:15:07 -0500

irssi (0.8.12-4ubuntu2.1) intrepid-security; urgency=low

  * SECURITY UPDATE: off-by-one error allows remote IRC server to cause a
    denial of service via application crash
    - debian/patches/91CVE-2009-1959.patch: adjust fe-common/irc/fe-events.c
      to verify length of string before writing '\0'
    - CVE-2009-1959

 -- Jamie Strandboge <email address hidden>   Thu, 09 Jul 2009 11:37:41 -0500

irssi (0.8.12-4ubuntu2) intrepid; urgency=low

  * debian/patches/90irc-ubuntu-com.dpatch: Changed irc.ubuntu.com's
    default port to 8001 to avoid DCC exploit (LP: #263259).

 -- Jonathan Patrick Davies <email address hidden>   Sun, 31 Aug 2008 12:28:41 +0100

irssi (0.8.12-4ubuntu1) intrepid; urgency=low

  * Merge from debian unstable (LP: #241282), remaining changes:
    - Added debian/patches/90irc-ubuntu-com.dpatch (LP: #52690)
    - debian/patches/03firsttimer_text:
      + Adapt it so it tells you about connecting to irc.ubuntu.com and
        joining #ubuntu instead of irc.debian.org and #debian. (LP: #188590)
        New with this merge: We now also apply this patch.
    - Modify Maintainer value to match DebianMaintainerField spec.
    - debian/irssi.perm: Don't remove alternative on upgrades. (LP: #67698)
  * debian/patches/91-manpage-typo:
    - Dropped, merged upstream.

irssi (0.8.12-4) unstable; urgency=low

  * Remove alternative handling cleanup from before etch release.
  * Fixed a typo noticed by John Dong, patch typo-authentification
    (closes: #465570)
  * Pull upstream revision r4612 as patch help-URL-fix to fix help URL
    (closes: #485140)
  * Remove reference to LEAVE in help files, patch leave-help
    (closes: #255535)
  * Apply patch from Tim Retout to use default colour for ownnick and actions
    instead of white (closes: #479171)
  * Remove autogenerated files, both from patch series and also in clean
    target. Thanks to Felix Palmen for mentioning it (closes: #476473)
  * Add doc-base files for the FAQ, manual and startup-HOWTO
    (closes: #451690, #480098)
  * Update to Standards-Version 3.8.0:
    - Add debian/README.source referencing the quilt documentation.
  * Actually also _use_ the menu file for irssi...  And removed some of the
    other commented dh_* entries in debian/rules.
  * Updated debian/copyright to contain more current informations, added the
    keyword exception to the openssl linking GPL addition.
  * Removed empty debian/irssi.postinst file.

 -- Pedro Fragoso <email address hidden>   Wed, 11 Jun 2008 15:36:34 +0100

irssi (0.8.12-3ubuntu4) intrepid; urgency=low

  * Rebuild for the perl 5.10 transition (LP: #230016).

 -- Michael Bienia <email address hidden>   Sat, 24 May 2008 15:02:30 +0200

irssi (0.8.12-3ubuntu3) hardy; urgency=low

  * Replace authentification with a less amusing word

 -- John Dong <email address hidden>   Fri, 08 Feb 2008 20:57:33 -0500