teldra
/
vp-build
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

kio-extras: fix CVE-2018-19120. 

> The HTML thumbnailer was incorrectly accessing some content of
> remote URLs listed in HTML files. This meant that the owners of the servers
> referred in HTML files in your system could have seen in their access logs
> your IP address every time the thumbnailer tried to create the thumbnail.
This commit is contained in:
Johannes 2018-11-12 19:49:49 +01:00 committed by Johannes
parent c2f939c1d0
commit 60b1b8f6f2
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
srcpkgs/kio-extras/template
View File

@ -1,7 +1,7 @@
# Template file for 'kio-extras'
pkgname=kio-extras
version=18.08.3
revision=1
revision=2
build_style=cmake
configure_args="-DBUILD_TESTING=OFF -DDESKTOPTOJSON_EXECUTABLE=/usr/bin/desktoptojson"
hostmakedepends="extra-cmake-modules pkg-config gperf qt5-qmake qt5-host-tools
@ -16,3 +16,9 @@ license="GPL-2.0-or-later, LGPL-2.0-or-later"
homepage="https://cgit.kde.org/kio-extras.git"
distfiles="${KDE_SITE}/applications/${version}/src/${pkgname}-${version}.tar.xz"
checksum=450d69b16a873da51190c9397b2b0ecb08bc0dcae0d2a07f7ab1d2efcd02c280
post_install() {
# workaround for CVE-2018-19120
rm "${DESTDIR}/usr/lib/qt5/plugins/htmlthumbnail.so"
rm "${DESTDIR}/usr/share/kservices5/htmlthumbnail.desktop"
}