summaryrefslogtreecommitdiff
path: root/libre
diff options
context:
space:
mode:
authorAndré Fabian Silva Delgado <emulatorman@parabola.nu>2017-03-02 02:14:39 -0300
committerAndré Fabian Silva Delgado <emulatorman@parabola.nu>2017-03-02 02:14:39 -0300
commit30fe734a46dd5363c7e6d1fa89036540b895dd90 (patch)
tree01aecbf40aa19363f31041e65c79c53842276a5f /libre
parentaeb4f4f53a72dbb76c3854dd273ca76a54b72346 (diff)
downloadabslibre-30fe734a46dd5363c7e6d1fa89036540b895dd90.tar.gz
abslibre-30fe734a46dd5363c7e6d1fa89036540b895dd90.tar.bz2
abslibre-30fe734a46dd5363c7e6d1fa89036540b895dd90.zip
kio-5.31.0-2.parabola1: backport security fix
Diffstat (limited to 'libre')
-rw-r--r--libre/kio/PKGBUILD11
1 files changed, 8 insertions, 3 deletions
diff --git a/libre/kio/PKGBUILD b/libre/kio/PKGBUILD
index 408bda5f0..382f076c7 100644
--- a/libre/kio/PKGBUILD
+++ b/libre/kio/PKGBUILD
@@ -1,11 +1,11 @@
-# $Id: PKGBUILD 288570 2017-02-11 09:58:58Z arojas $
+# $Id: PKGBUILD 289732 2017-02-28 18:46:24Z arojas $
# Maintainer (Arch): Felix Yan <felixonmars@archlinux.org>
# Contributor (Arch): Andrea Scarpino <andrea@archlinux.org>
# Maintainer: André Silva <emulatorman@parabola.nu>
pkgname=kio
pkgver=5.31.0
-pkgrel=1.parabola1
+pkgrel=2.parabola1
pkgdesc='Resource and network access abstraction, without non-privacy search engines'
arch=('i686' 'x86_64' 'armv7h')
url='https://community.kde.org/Frameworks'
@@ -14,11 +14,13 @@ depends=('solid' 'kjobwidgets' 'kbookmarks' 'libxslt' 'kwallet' 'desktop-file-ut
makedepends=('extra-cmake-modules' 'kdoctools' 'python')
optdepends=('kio-extras: extra protocols support (sftp, fish and more)')
groups=('kf5')
-source=("http://download.kde.org/stable/frameworks/${pkgver%.*}/${pkgname}-${pkgver}.tar.xz"{,.sig}
+source=("https://download.kde.org/stable/frameworks/${pkgver%.*}/${pkgname}-${pkgver}.tar.xz"{,.sig}
+ kio-sanitize-url.patch::"https://cgit.kde.org/kio.git/patch/?id=f9d0cb47"
'duckduckgo_html.desktop'
'duckduckgo_lite.desktop')
md5sums=('62f31e7a9cd0b875fce5b552ec9be3c7'
'SKIP'
+ '3044fd99f934879390f29ec71e2d795a'
'59462f450ae72354ab3ca188710e2330'
'1ca9884d8dc89c5713a1f42033775bcd')
validpgpkeys=(53E6B47B45CEA3E0D5B7457758D0EE648A48B3BB) # David Faure <faure@kde.org>
@@ -28,6 +30,9 @@ prepare() {
cd ${pkgname}-${pkgver}
+ # Sanitize URLs before passing them to FindProxyForURL
+ patch -p1 -i ../kio-sanitize-url.patch
+
# Removing non-privacy search providers
rm -v src/urifilters/ikws/searchproviders/{7digital,acronym,amazon{,_mp3},amg,backports,baidu,bing,blip,cia,dbug,deb,duckduckgo{,_info,_shopping},facebook,ecosia,feedster,flickr,flickrcc,google,google_advanced,google_code,google_groups,google_images,google_lucky,google_maps,google_movie,google_news,google_shopping,imdb,jamendo,jeeves,magnatune,metacrawler,msdn,nl-telephone,nl-teletekst,python,rpmfind,tvtome,uspto,vimeo,voila,yahoo,yahoo_image,yahoo_local,yahoo_shopping,yahoo_video,youtube}.desktop