git » kio.git » commit 8bf1994

Backport security fix

author Antonio Rojas
2017-02-28 18:46:24 UTC
committer Antonio Rojas
2017-02-28 18:46:24 UTC
parent a3078898a282f40eeeae0a4375fb2ec6182512e3

Backport security fix

PKGBUILD +8 -3

diff --git a/PKGBUILD b/PKGBUILD
index 3b4cc49..52e119f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -3,7 +3,7 @@
 
 pkgname=kio
 pkgver=5.31.0
-pkgrel=1
+pkgrel=2
 pkgdesc='Resource and network access abstraction'
 arch=('i686' 'x86_64')
 url='https://community.kde.org/Frameworks'
@@ -12,13 +12,18 @@ depends=('solid' 'kjobwidgets' 'kbookmarks' 'libxslt' 'kwallet' 'desktop-file-ut
 makedepends=('extra-cmake-modules' 'kdoctools' 'python')
 optdepends=('kio-extras: extra protocols support (sftp, fish and more)')
 groups=('kf5')
-source=("https://download.kde.org/stable/frameworks/${pkgver%.*}/${pkgname}-${pkgver}.tar.xz"{,.sig})
+source=("https://download.kde.org/stable/frameworks/${pkgver%.*}/${pkgname}-${pkgver}.tar.xz"{,.sig}
+        kio-sanitize-url.patch::"https://cgit.kde.org/kio.git/patch/?id=f9d0cb47")
 md5sums=('62f31e7a9cd0b875fce5b552ec9be3c7'
-         'SKIP')
+         'SKIP'
+         '3044fd99f934879390f29ec71e2d795a')
 validpgpkeys=(53E6B47B45CEA3E0D5B7457758D0EE648A48B3BB) # David Faure <faure@kde.org>
 
 prepare() {
   mkdir -p build
+# Sanitize URLs before passing them to FindProxyForURL
+  cd $pkgname-$pkgver
+  patch -p1 -i ../kio-sanitize-url.patch
 }
 
 build() {