New commits:
commit 48f7c1a5ca9a45a888d60ae9a984efe5d38450b4
Author: Thomas Orgis <sobukus AT sourcemage.org>
Commit: Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
guilib: REALLY removing BUILD
(cherry picked from commit 75b19d2598a8ece13469ace117502f3e4f06d26a)
commit 36b7cdcdd5478fe87b6fc77c1f3df0fda8583e15
Author: Thomas Orgis <sobukus AT sourcemage.org>
Commit: Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
guilib: really remove patches and BUILD now, also not needed for alpha
(cherry picked from commit a17563b2dc83bf2c9767d71aea640d3f3ac3133f)
commit 6e62f30580475eff5acba67ce21dbb3f1fc8be54
Author: Ladislav Hagara <ladislav.hagara AT unob.cz>
Commit: Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
links-twibright 2.1pre30, SECURITY_PATCH=1
(cherry picked from commit 3a52a6aa3184cc53fbd63719f8521b330a7ffc71)
commit 85aaa84cde1a3107f287cc44de5cab543a73e802
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
kdebase - security fix 13950
(cherry picked from commit f02db1978864b25bce5c1dce8b8da904fecdfb13)
commit 794fa4b40ea22cd7c7d6f0ee857a4331bbfe3d30
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
kdelibs - security fix 13950
(cherry picked from commit 5583953903b28ebb71a239211e8181e18aaf01d3)
diff --git a/http/links-twibright/DETAILS b/http/links-twibright/DETAILS
index 3ed6f66..2ad31da 100755
--- a/http/links-twibright/DETAILS
+++ b/http/links-twibright/DETAILS
@@ -1,13 +1,14 @@
SPELL=links-twibright
- VERSION=2.1pre29
+ VERSION=2.1pre30
SOURCE_NAME=links
SOURCE=$SOURCE_NAME-$VERSION.tar.bz2
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SOURCE_NAME-$VERSION
SOURCE_URL[0]=http://links.twibright.com/download/$SOURCE
-
SOURCE_HASH=sha512:8a2f7c19ab12892737ab6d45c819800cefa5386cb40133bf5f6e369a1a3efadce3ae253242c6f478f8e3e9c75f79c448da7cc3f6ca84043df18073b727bb8616
+
SOURCE_HASH=sha512:9d909cace759c04ef7b812316946c78a6a9ccc9b5198b4179ec35466d4825579f6716673043cbf430eb54dfc769ba159ae4cc16e0d39e1e8e95992defde76dc5
LICENSE[0]=GPL
WEB_SITE=http://links.twibright.com/
ENTERED=20011027
+ SECURITY_PATCH=1
PATCHLEVEL=0
KEYWORDS="http"
SHORT='Advanced text browser with an optional GUI'
diff --git a/http/links-twibright/HISTORY b/http/links-twibright/HISTORY
index 6c69a70..fe04d2a 100644
--- a/http/links-twibright/HISTORY
+++ b/http/links-twibright/HISTORY
@@ -1,3 +1,6 @@
+2007-08-16 Ladislav Hagara <hgr AT vabo.cz>
+ * DETAILS: 2.1pre30, SECURITY_PATCH=1
+
2007-07-17 Ladislav Hagara <hgr AT vabo.cz>
* DETAILS: 2.1pre29
diff --git a/kde-core/kdebase/DETAILS b/kde-core/kdebase/DETAILS
index 0620370..dc439fc 100755
--- a/kde-core/kdebase/DETAILS
+++ b/kde-core/kdebase/DETAILS
@@ -13,7 +13,7 @@ if [[ $SMGL_THEME == "y" ]]; then
fi
WEB_SITE=http://www.kde.org
ENTERED=20010912
- SECURITY_PATCH=1
+ SECURITY_PATCH=2
LICENSE[0]=GPL
KEYWORDS="kde"
SHORT="Base applications that form the core of KDE."
diff --git a/kde-core/kdebase/HISTORY b/kde-core/kdebase/HISTORY
index c91ef4c..4c4e521 100644
--- a/kde-core/kdebase/HISTORY
+++ b/kde-core/kdebase/HISTORY
@@ -1,3 +1,8 @@
+2007-08-22 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: SECURTIY_PATCH++
+ * post-3.5.7-kdebase-konqueror.diff: added
+ * PRE_BUILD: apply security patch
+
2007-05-22 Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
* DETAILS: updated spell to 3.5.7
diff --git a/kde-core/kdebase/PRE_BUILD b/kde-core/kdebase/PRE_BUILD
index 07fb1e0..10c9438 100755
--- a/kde-core/kdebase/PRE_BUILD
+++ b/kde-core/kdebase/PRE_BUILD
@@ -1,7 +1,6 @@
default_pre_build &&
cd $SOURCE_DIRECTORY &&
-# dbus patch
-#patch -p0 < $SPELL_DIRECTORY/dbus.patch &&
+patch -p0 < $SPELL_DIRECTORY/post-3.5.7-kdebase-konqueror.diff &&
# splashscreen patch
if [[ $SMGL_THEME == "y" ]]; then
unpack_file 2
diff --git a/kde-core/kdebase/post-3.5.7-kdebase-konqueror.diff
b/kde-core/kdebase/post-3.5.7-kdebase-konqueror.diff
new file mode 100644
index 0000000..0d6e44e
--- /dev/null
+++ b/kde-core/kdebase/post-3.5.7-kdebase-konqueror.diff
@@ -0,0 +1,49 @@
+--- konqueror/konq_combo.cc
++++ konqueror/konq_combo.cc
+@@ -158,6 +158,9 @@ void KonqCombo::setURL( const QString& u
+ kapp->dcopClient()->send( "konqueror*", "KonquerorIface",
+ "addToCombo(QString,QCString)", data);
+ }
++ // important security consideration: always display the beginning
++ // of the url rather than its end to prevent spoofing attempts.
++ lineEdit()->setCursorPosition( 0 );
+ }
+
+ void KonqCombo::setTemporary( const QString& text )
+--- konqueror/konq_mainwindow.cc
++++ konqueror/konq_mainwindow.cc
+@@ -611,12 +611,11 @@ void KonqMainWindow::openURL( KonqView *
+ }
+ else // no known serviceType, use KonqRun
+ {
+- if ( ( view && view == m_currentView ) ||
+- ( !view && !req.newTab ) ) // startup with argument
++ if ( ( !view || view->url().isEmpty() ) && !req.newTab ) // startup
with argument
+ {
+ // Show it for now in the location bar, but we'll need to store
it in the view
+ // later on (can't do it yet since either view == 0 or
updateHistoryEntry will be called).
+- kdDebug(1202) << "setLocationBarURL : url = " << url << endl;
++ kdDebug(1202) << "setLocationBarURL (startup) : url = " << url <<
endl;
+ setLocationBarURL( url );
+ }
+
+@@ -819,8 +818,6 @@ bool KonqMainWindow::openView( QString s
+ if ( childView )
+ {
+ enableAllActions( true );
+-
+- m_pViewManager->setActivePart( childView->part() );
+ m_currentView = childView;
+ }
+ }
+--- konqueror/konq_viewmgr.cc
++++ konqueror/konq_viewmgr.cc
+@@ -1395,6 +1395,8 @@ void KonqViewManager::slotActivePartChan
+
+ void KonqViewManager::emitActivePartChanged()
+ {
++ // prevent unnecessary multiple calls to slotPartActivated:
++ m_activePartChangedTimer->stop();
+ m_pMainWindow->slotPartActivated( activePart() );
+ }
+
diff --git a/kde-core/kdelibs/DETAILS b/kde-core/kdelibs/DETAILS
index 0cd5a79..c067ee7 100755
--- a/kde-core/kdelibs/DETAILS
+++ b/kde-core/kdelibs/DETAILS
@@ -8,7 +8,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE_URL[0]=$KDE_URL/stable/${VERSION//.0/}/src/$SOURCE
WEB_SITE=http://www.kde.org
ENTERED=20020912
- SECURITY_PATCH=3
+ SECURITY_PATCH=4
LICENSE[0]=GPL
KEYWORDS="kde"
SHORT="Base applications that form the core of KDE."
diff --git a/kde-core/kdelibs/HISTORY b/kde-core/kdelibs/HISTORY
index 1ba99a6..8d37f74 100644
--- a/kde-core/kdelibs/HISTORY
+++ b/kde-core/kdelibs/HISTORY
@@ -1,3 +1,13 @@
+2007-08-21 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: SECURITY_PATCH++
+ * post-3.5.7-kdelibs-kdecore.diff: added
+ cups.diff: added
+ fix compilation with cups-1.3 (upstream patch) kde bug #148121
+ * PRE_BUILD: apply patches
+ security fix CVE-2007-4224, CVE-2007-4225, CVE-2007-3820
+ URL: http://www.kde.org/info/security/advisory-20070816-1.txt
+ fixes bug #13950
+
2007-05-22 Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
* DETAILS: updated spell to 3.5.7