Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Treeve Jelbert (942744837645086a42ee716165351db7bd364730)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Treeve Jelbert <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Treeve Jelbert (942744837645086a42ee716165351db7bd364730)
  • Date: Mon, 16 Mar 2020 11:03:07 +0000

GIT changes to master grimoire by Treeve Jelbert <treeve AT sourcemage.org>:

kde5-graphics/okular/DETAILS | 2 +-
kde5-graphics/okular/HISTORY | 5 +++++
kde5-graphics/okular/PRE_BUILD | 5 +++--
kde5-graphics/okular/patches/cve.patch | 14 ++++++++++++++
4 files changed, 23 insertions(+), 3 deletions(-)

New commits:
commit 942744837645086a42ee716165351db7bd364730
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

okular -SECURITY FIX

diff --git a/kde5-graphics/okular/DETAILS b/kde5-graphics/okular/DETAILS
index 9ba0a18..04a6508 100755
--- a/kde5-graphics/okular/DETAILS
+++ b/kde5-graphics/okular/DETAILS
@@ -9,7 +9,7 @@
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
WEB_SITE=https://quickgit.kde.org/?p=okular/.git
ENTERED=20110301
-# SECURITY_PATCH=1
+ SECURITY_PATCH=1
LICENSE[0]=GPL
KEYWORDS="kde5"
SHORT="document viewer for kde"
diff --git a/kde5-graphics/okular/HISTORY b/kde5-graphics/okular/HISTORY
index 96d4a94..4b04e8a 100644
--- a/kde5-graphics/okular/HISTORY
+++ b/kde5-graphics/okular/HISTORY
@@ -1,3 +1,8 @@
+2020-03-16 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: SECURITY_PATCH++
+ * PRE-BUILD: apply patch
+ * patched/cve: added , fix CVE-2020-9359
+
2020-03-05 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 19.12.3

diff --git a/kde5-graphics/okular/PRE_BUILD b/kde5-graphics/okular/PRE_BUILD
index 27e7460..3e12cdf 100755
--- a/kde5-graphics/okular/PRE_BUILD
+++ b/kde5-graphics/okular/PRE_BUILD
@@ -1,4 +1,3 @@
-
default_pre_build &&
cd $SOURCE_DIRECTORY &&
if ! is_depends_enabled $SPELL chmlib; then
@@ -6,4 +5,6 @@ if ! is_depends_enabled $SPELL chmlib; then
fi &&
#sed -i 's/MODULE//' generators/spectre/CMakeLists.txt
rm -r autotests conf/autotests po
-sed -i '/autotests/D;/kdoctools_install/D' CMakeLists.txt
+sed -i '/autotests/D;/kdoctools_install/D' CMakeLists.txt &&
+# fix CVE-2020-9359
+apply_patch_dir patches
diff --git a/kde5-graphics/okular/patches/cve.patch
b/kde5-graphics/okular/patches/cve.patch
new file mode 100644
index 0000000..49693b1
--- /dev/null
+++ b/kde5-graphics/okular/patches/cve.patch
@@ -0,0 +1,14 @@
+diff --git a/core/document.cpp b/core/document.cpp
+index
3215a1abce6292a6cc25c5f8b645232c92d75ec5..0aa5b698019a2660f2d6baabd54cef1e82002b0e
100644
+--- a/core/document.cpp
++++ b/core/document.cpp
+@@ -4388,7 +4388,8 @@ void Document::processAction( const Action * action )
+ {
+ const QUrl realUrl = KIO::upUrl(d->m_url).resolved(url);
+ // KRun autodeletes
+- new KRun( realUrl, d->m_widget );
++ KRun *r = new KRun( realUrl, d->m_widget );
++ r->setRunExecutables(false);
+ }
+ }
+ } break;



  • [SM-Commit] GIT changes to master grimoire by Treeve Jelbert (942744837645086a42ee716165351db7bd364730), Treeve Jelbert, 03/16/2020

Archive powered by MHonArc 2.6.24.

Top of Page