[rekonq/f13/master] added patch to fix CVE-2010-2536
thomasj
thomasj at fedoraproject.org
Tue Aug 3 20:11:13 UTC 2010
commit b1a1a41d379d7f888ee681d0bb5c88fdc5303a7d
Author: Thomas Janssen <thomasj at fedoraproject.org>
Date: Tue Aug 3 22:11:07 2010 +0200
added patch to fix CVE-2010-2536
rekonq.spec | 9 ++++++++-
rekonq_fix_CVE-2010-2536.patch | 13 +++++++++++++
2 files changed, 21 insertions(+), 1 deletions(-)
---
diff --git a/rekonq.spec b/rekonq.spec
index 545b9c7..d4c23fb 100644
--- a/rekonq.spec
+++ b/rekonq.spec
@@ -1,6 +1,6 @@
Name: rekonq
Version: 0.5.0
-Release: 1%{?dist}
+Release: 2%{?dist}
Summary: KDE browser based on QtWebkit
Group: Applications/Internet
@@ -9,6 +9,8 @@ URL: http://rekonq.sourceforge.net/
Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.bz2
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
+Patch10: rekonq_fix_CVE-2010-2536.patch
+
BuildRequires: kdebase-workspace-devel >= 4.4.0
BuildRequires: qt-devel >= 4.6.0
BuildRequires: gettext
@@ -25,6 +27,7 @@ KDE technologies to have a full-featured KDE web browser.
%prep
%setup -q
+%patch10 -p0
%build
mkdir -p %{_target_platform}
@@ -67,6 +70,10 @@ rm -rf $RPM_BUILD_ROOT
%{_kde4_appsdir}/%{name}/*
%changelog
+* Tue Aug 03 2010 Thomas Janssen <thomasj at fedoraproject.org> 0.5.0-2
+- added patch to fix CVE-2010-2536 (patch by Eelko)
+- fixes #620897
+
* Tue Jul 13 2010 Eelko Berkenpies <fedora at berkenpi.es> 0.5.0-1
- rekonq 0.5.0
diff --git a/rekonq_fix_CVE-2010-2536.patch b/rekonq_fix_CVE-2010-2536.patch
new file mode 100644
index 0000000..1f2dd77
--- /dev/null
+++ b/rekonq_fix_CVE-2010-2536.patch
@@ -0,0 +1,13 @@
+--- src/webpage.cpp 2010-07-05 23:13:01.000000000 +0200
++++ src/webpage.cpp.old 2010-08-03 21:31:06.000000000 +0200
+@@ -577,8 +577,8 @@
+ return QString("Couldn't open the rekonqinfo.html file");
+ }
+
+- QString title = i18n("Error loading: %1", reply->url().toString());
+- QString urlString = reply->url().toString(QUrl::RemoveUserInfo | QUrl::RemoveQuery);
++ QString title = i18n("There was a problem while loading the page");
++ QString urlString = reply->url().toString(QUrl::RemoveUserInfo | QUrl::RemoveQuery | QUrl::RemovePath);
+
+ QString iconPath = QString("file://") + KIconLoader::global()->iconPath("dialog-warning" , KIconLoader::Small);
+ iconPath.replace(QL1S("16"), QL1S("128"));
More information about the scm-commits
mailing list