summaryrefslogtreecommitdiff
path: root/libre
diff options
context:
space:
mode:
authorAndré Fabian Silva Delgado <emulatorman@parabola.nu>2017-01-19 17:34:50 -0300
committerAndré Fabian Silva Delgado <emulatorman@parabola.nu>2017-01-19 17:35:17 -0300
commitd7526c9def039b7dde57f62eee7da3eb2e706812 (patch)
tree4c705c0672c0abbf99310899033fa1366aef6532 /libre
parent6c29b7c7a8c42917edf67dd6a5e3d42ae594fcb9 (diff)
downloadabslibre-d7526c9def039b7dde57f62eee7da3eb2e706812.tar.gz
abslibre-d7526c9def039b7dde57f62eee7da3eb2e706812.tar.bz2
abslibre-d7526c9def039b7dde57f62eee7da3eb2e706812.zip
kdebase-runtime-16.12.1-2.parabola1: drop HTML thumbnailer, qtwebkit has many security issues
Diffstat (limited to 'libre')
-rw-r--r--libre/kdebase-runtime/PKGBUILD13
-rw-r--r--libre/kdebase-runtime/kdebase-runtime-no-html-thumbnails.patch21
2 files changed, 30 insertions, 4 deletions
diff --git a/libre/kdebase-runtime/PKGBUILD b/libre/kdebase-runtime/PKGBUILD
index d2eb82b5d..110bc095c 100644
--- a/libre/kdebase-runtime/PKGBUILD
+++ b/libre/kdebase-runtime/PKGBUILD
@@ -1,4 +1,4 @@
-# $Id: PKGBUILD 285928 2017-01-12 19:03:07Z arojas $
+# $Id: PKGBUILD 286970 2017-01-19 12:22:11Z arojas $
# Maintainer (Arch): Felix Yan <felixonmars@archlinux.org>
# Contributor (Arch): Andrea Scarpino <andrea@archlinux.org>
# Contributor (Arch): Pierre Schmitz <pierre@archlinux.de>
@@ -6,7 +6,7 @@
pkgname=kdebase-runtime
pkgver=16.12.1
-pkgrel=1.parabola1
+pkgrel=2.parabola1
pkgdesc="Plugins and applications necessary for the running of KDE applications, without non-privacy search engines"
arch=('i686' 'x86_64' 'armv7h')
url='https://www.kde.org/'
@@ -19,11 +19,13 @@ conflicts=(kdesu4)
replaces=(kdesu4)
source=("http://download.kde.org/stable/applications/${pkgver}/src/kde-runtime-${pkgver}.tar.xz"{,.sig}
'duckduckgo_html.desktop'
- 'duckduckgo_lite.desktop')
+ 'duckduckgo_lite.desktop'
+ 'kdebase-runtime-no-html-thumbnails.patch')
sha1sums=('0546a3fb14e402b5026fb7fd8c07f0bc6c51829a'
'SKIP'
'aa6f39f4b0ad3c110fd05cd6c41190afae9773dd'
- 'ac3bac94a2c4b1444642524bc5fb539c4c5dcc5b')
+ 'ac3bac94a2c4b1444642524bc5fb539c4c5dcc5b'
+ '5f78db33cfdae44e53aa5bb0b7bd9ebdc1e42808')
validpgpkeys=(CA262C6C83DE4D2FB28A332A3A6A4DB839EAA6D7) # Albert Astals Cid <aacid@kde.org>
prepare() {
@@ -34,6 +36,9 @@ prepare() {
# Don't link to kactivities
sed -e '/plasmaextracomponents/d' -i plasma/declarativeimports/CMakeLists.txt
+ # Drop HTML thumbnailer, uses insecure QtWebKit
+ patch -p1 -i ../kdebase-runtime-no-html-thumbnails.patch
+
# Removing non-privacy search providers
rm -v kurifilter-plugins/ikws/searchproviders/{7digital,acronym,amazon{,_mp3},amg,backports,baidu,bing,blip,cia,dbug,deb,duckduckgo{,_info,_shopping},facebook,ecosia,feedster,flickr,flickrcc,google,google_advanced,google_code,google_groups,google_images,google_lucky,google_maps,google_movie,google_news,google_shopping,imdb,jamendo,jeeves,magnatune,metacrawler,msdn,nl-telephone,nl-teletekst,python,rpmfind,tvtome,uspto,vimeo,voila,yahoo,yahoo_image,yahoo_local,yahoo_shopping,yahoo_video,youtube}.desktop
diff --git a/libre/kdebase-runtime/kdebase-runtime-no-html-thumbnails.patch b/libre/kdebase-runtime/kdebase-runtime-no-html-thumbnails.patch
new file mode 100644
index 000000000..7e8cf076f
--- /dev/null
+++ b/libre/kdebase-runtime/kdebase-runtime-no-html-thumbnails.patch
@@ -0,0 +1,21 @@
+--- kde-runtime-16.12.1/kioslave/thumbnail/CMakeLists.txt.0 2017-01-19 12:11:22.764891155 +0000
++++ kde-runtime-16.12.1/kioslave/thumbnail/CMakeLists.txt 2017-01-19 12:11:40.741524858 +0000
+@@ -89,18 +89,6 @@
+
+ ########### next target ###############
+
+-if(NOT WINCE)
+-set(htmlthumbnail_PART_SRCS htmlcreator.cpp)
+-
+-kde4_add_plugin(htmlthumbnail ${htmlthumbnail_PART_SRCS})
+-
+-target_link_libraries(htmlthumbnail ${KDE4_KDEWEBKIT_LIBS})
+-
+-install(TARGETS htmlthumbnail DESTINATION ${PLUGIN_INSTALL_DIR})
+-endif(NOT WINCE)
+-
+-########### next target ###############
+-
+ if(NOT WIN32)
+ set(djvuthumbnail_PART_SRCS djvucreator.cpp)
+