1 |
commit: 4b7826b1c6186fe0dea304ff3108cf9610210925 |
2 |
Author: Michael Palimaka <kensington <AT> gentoo <DOT> org> |
3 |
AuthorDate: Sat Dec 1 02:37:24 2018 +0000 |
4 |
Commit: Michael Palimaka <kensington <AT> gentoo <DOT> org> |
5 |
CommitDate: Sat Dec 1 02:37:58 2018 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4b7826b1 |
7 |
|
8 |
kde-apps/messagelib: revision bump resolving CVE-2018-19516 |
9 |
|
10 |
Bug: https://bugs.gentoo.org/672312 |
11 |
Package-Manager: Portage-2.3.51, Repoman-2.3.12 |
12 |
Signed-off-by: Michael Palimaka <kensington <AT> gentoo.org> |
13 |
|
14 |
.../files/messagelib-18.04.3-CVE-2018-19516.patch | 17 +++++ |
15 |
.../files/messagelib-18.08.3-CVE-2018-19516.patch | 29 +++++++++ |
16 |
kde-apps/messagelib/messagelib-18.04.3-r1.ebuild | 72 +++++++++++++++++++++ |
17 |
kde-apps/messagelib/messagelib-18.08.3-r2.ebuild | 74 ++++++++++++++++++++++ |
18 |
4 files changed, 192 insertions(+) |
19 |
|
20 |
diff --git a/kde-apps/messagelib/files/messagelib-18.04.3-CVE-2018-19516.patch b/kde-apps/messagelib/files/messagelib-18.04.3-CVE-2018-19516.patch |
21 |
new file mode 100644 |
22 |
index 00000000000..4d3fac7334b |
23 |
--- /dev/null |
24 |
+++ b/kde-apps/messagelib/files/messagelib-18.04.3-CVE-2018-19516.patch |
25 |
@@ -0,0 +1,17 @@ |
26 |
+diff --git a/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp b/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp |
27 |
+index 0d209524..0dad4174 100644 |
28 |
+--- a/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp |
29 |
++++ b/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp |
30 |
+@@ -299,6 +299,12 @@ QString processHtml(const QString &htmlSource, QString &extraHead) |
31 |
+ return htmlSource; |
32 |
+ } |
33 |
+ extraHead = s.mid(6, idx - 6); |
34 |
++ |
35 |
++ //Don't authorize to refresh content. |
36 |
++ if (s.contains(QStringLiteral("http-equiv=\"REFRESH\""), Qt::CaseInsensitive)) { |
37 |
++ extraHead.clear(); |
38 |
++ } |
39 |
++ |
40 |
+ s = s.mid(idx + 7).trimmed(); |
41 |
+ } |
42 |
+ |
43 |
|
44 |
diff --git a/kde-apps/messagelib/files/messagelib-18.08.3-CVE-2018-19516.patch b/kde-apps/messagelib/files/messagelib-18.08.3-CVE-2018-19516.patch |
45 |
new file mode 100644 |
46 |
index 00000000000..21108ae1fb6 |
47 |
--- /dev/null |
48 |
+++ b/kde-apps/messagelib/files/messagelib-18.08.3-CVE-2018-19516.patch |
49 |
@@ -0,0 +1,29 @@ |
50 |
+From 1fd737870f5a9c5bf44ad9fbd153ab4cf44e135d Mon Sep 17 00:00:00 2001 |
51 |
+From: Laurent Montel <montel@×××.org> |
52 |
+Date: Fri, 23 Nov 2018 07:37:02 +0100 |
53 |
+Subject: [PATCH] Exclude Refresh from MetaData (Not necessary) |
54 |
+ |
55 |
+--- |
56 |
+ .../src/messagepartthemes/default/defaultrenderer.cpp | 6 ++++++ |
57 |
+ 1 file changed, 6 insertions(+) |
58 |
+ |
59 |
+diff --git a/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp b/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp |
60 |
+index a7ffe824..d5d41cf6 100644 |
61 |
+--- a/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp |
62 |
++++ b/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp |
63 |
+@@ -308,6 +308,12 @@ QString processHtml(const QString &htmlSource, QString &extraHead) |
64 |
+ return htmlSource; |
65 |
+ } |
66 |
+ extraHead = s.mid(startIndex + 6 , endIndex - startIndex - 6); |
67 |
++ |
68 |
++ //Don't authorize to refresh content. |
69 |
++ if (s.contains(QStringLiteral("http-equiv=\"REFRESH\""), Qt::CaseInsensitive)) { |
70 |
++ extraHead.clear(); |
71 |
++ } |
72 |
++ |
73 |
+ s = s.mid(endIndex + 7).trimmed(); |
74 |
+ } |
75 |
+ |
76 |
+-- |
77 |
+2.19.2 |
78 |
+ |
79 |
|
80 |
diff --git a/kde-apps/messagelib/messagelib-18.04.3-r1.ebuild b/kde-apps/messagelib/messagelib-18.04.3-r1.ebuild |
81 |
new file mode 100644 |
82 |
index 00000000000..05699236352 |
83 |
--- /dev/null |
84 |
+++ b/kde-apps/messagelib/messagelib-18.04.3-r1.ebuild |
85 |
@@ -0,0 +1,72 @@ |
86 |
+# Copyright 1999-2018 Gentoo Authors |
87 |
+# Distributed under the terms of the GNU General Public License v2 |
88 |
+ |
89 |
+EAPI=6 |
90 |
+ |
91 |
+KDE_TEST="forceoptional-recursive" |
92 |
+VIRTUALX_REQUIRED="test" |
93 |
+inherit kde5 |
94 |
+ |
95 |
+DESCRIPTION="Libraries for messaging functions" |
96 |
+LICENSE="GPL-2+ LGPL-2.1+" |
97 |
+KEYWORDS="~amd64 ~x86" |
98 |
+IUSE="" |
99 |
+ |
100 |
+DEPEND=" |
101 |
+ $(add_frameworks_dep karchive) |
102 |
+ $(add_frameworks_dep kcodecs) |
103 |
+ $(add_frameworks_dep kcompletion) |
104 |
+ $(add_frameworks_dep kconfig) |
105 |
+ $(add_frameworks_dep kconfigwidgets) |
106 |
+ $(add_frameworks_dep kcoreaddons) |
107 |
+ $(add_frameworks_dep kdbusaddons) |
108 |
+ $(add_frameworks_dep ki18n) |
109 |
+ $(add_frameworks_dep kiconthemes) |
110 |
+ $(add_frameworks_dep kio) |
111 |
+ $(add_frameworks_dep kitemmodels) |
112 |
+ $(add_frameworks_dep kitemviews) |
113 |
+ $(add_frameworks_dep kjobwidgets) |
114 |
+ $(add_frameworks_dep knotifications) |
115 |
+ $(add_frameworks_dep kservice) |
116 |
+ $(add_frameworks_dep ktextwidgets) |
117 |
+ $(add_frameworks_dep kwidgetsaddons) |
118 |
+ $(add_frameworks_dep kwindowsystem) |
119 |
+ $(add_frameworks_dep kxmlgui) |
120 |
+ $(add_frameworks_dep sonnet) |
121 |
+ $(add_frameworks_dep syntax-highlighting) |
122 |
+ $(add_kdeapps_dep akonadi) |
123 |
+ $(add_kdeapps_dep akonadi-contacts) |
124 |
+ $(add_kdeapps_dep akonadi-mime) |
125 |
+ $(add_kdeapps_dep grantleetheme) |
126 |
+ $(add_kdeapps_dep incidenceeditor) |
127 |
+ $(add_kdeapps_dep kcalcore) |
128 |
+ $(add_kdeapps_dep kcontacts) |
129 |
+ $(add_kdeapps_dep kdepim-apps-libs) |
130 |
+ $(add_kdeapps_dep kidentitymanagement) |
131 |
+ $(add_kdeapps_dep kldap) |
132 |
+ $(add_kdeapps_dep kmailtransport) |
133 |
+ $(add_kdeapps_dep kmbox) |
134 |
+ $(add_kdeapps_dep kmime) |
135 |
+ $(add_kdeapps_dep kpimtextedit) |
136 |
+ $(add_kdeapps_dep libgravatar) |
137 |
+ $(add_kdeapps_dep libkdepim) |
138 |
+ $(add_kdeapps_dep libkleo) |
139 |
+ $(add_qt_dep qtgui) |
140 |
+ $(add_qt_dep qtnetwork) |
141 |
+ $(add_qt_dep qtprintsupport) |
142 |
+ $(add_qt_dep qtwebengine 'widgets') |
143 |
+ $(add_qt_dep qtwidgets) |
144 |
+ >=app-crypt/gpgme-1.8.0-r1[cxx,qt5] |
145 |
+ >=dev-libs/grantlee-5.1.0:5 |
146 |
+" |
147 |
+RDEPEND="${DEPEND} |
148 |
+ !<kde-apps/kdepim-addons-16.08.50:5 |
149 |
+ !kde-apps/kdepim-common-libs:4 |
150 |
+ !kde-apps/kdepim-l10n |
151 |
+ !=kde-apps/kmail-4.4*:4 |
152 |
+" |
153 |
+ |
154 |
+# bug 579630 |
155 |
+RESTRICT+=" test" |
156 |
+ |
157 |
+PATCHES=( "${FILESDIR}/${P}-CVE-2018-19516.patch" ) |
158 |
|
159 |
diff --git a/kde-apps/messagelib/messagelib-18.08.3-r2.ebuild b/kde-apps/messagelib/messagelib-18.08.3-r2.ebuild |
160 |
new file mode 100644 |
161 |
index 00000000000..6056ee7e12e |
162 |
--- /dev/null |
163 |
+++ b/kde-apps/messagelib/messagelib-18.08.3-r2.ebuild |
164 |
@@ -0,0 +1,74 @@ |
165 |
+# Copyright 1999-2018 Gentoo Authors |
166 |
+# Distributed under the terms of the GNU General Public License v2 |
167 |
+ |
168 |
+EAPI=6 |
169 |
+ |
170 |
+KDE_TEST="forceoptional" |
171 |
+VIRTUALX_REQUIRED="test" |
172 |
+inherit kde5 |
173 |
+ |
174 |
+DESCRIPTION="Libraries for messaging functions" |
175 |
+LICENSE="GPL-2+ LGPL-2.1+" |
176 |
+KEYWORDS="~amd64 ~x86" |
177 |
+IUSE="" |
178 |
+ |
179 |
+DEPEND=" |
180 |
+ $(add_frameworks_dep karchive) |
181 |
+ $(add_frameworks_dep kcodecs) |
182 |
+ $(add_frameworks_dep kcompletion) |
183 |
+ $(add_frameworks_dep kconfig) |
184 |
+ $(add_frameworks_dep kconfigwidgets) |
185 |
+ $(add_frameworks_dep kcoreaddons) |
186 |
+ $(add_frameworks_dep kdbusaddons) |
187 |
+ $(add_frameworks_dep ki18n) |
188 |
+ $(add_frameworks_dep kiconthemes) |
189 |
+ $(add_frameworks_dep kio) |
190 |
+ $(add_frameworks_dep kitemmodels) |
191 |
+ $(add_frameworks_dep kitemviews) |
192 |
+ $(add_frameworks_dep kjobwidgets) |
193 |
+ $(add_frameworks_dep knotifications) |
194 |
+ $(add_frameworks_dep kservice) |
195 |
+ $(add_frameworks_dep ktextwidgets) |
196 |
+ $(add_frameworks_dep kwidgetsaddons) |
197 |
+ $(add_frameworks_dep kwindowsystem) |
198 |
+ $(add_frameworks_dep kxmlgui) |
199 |
+ $(add_frameworks_dep sonnet) |
200 |
+ $(add_frameworks_dep syntax-highlighting) |
201 |
+ $(add_kdeapps_dep akonadi) |
202 |
+ $(add_kdeapps_dep akonadi-contacts) |
203 |
+ $(add_kdeapps_dep akonadi-mime) |
204 |
+ $(add_kdeapps_dep grantleetheme) |
205 |
+ $(add_kdeapps_dep incidenceeditor) |
206 |
+ $(add_kdeapps_dep kcalcore) |
207 |
+ $(add_kdeapps_dep kcontacts) |
208 |
+ $(add_kdeapps_dep kdepim-apps-libs) |
209 |
+ $(add_kdeapps_dep kidentitymanagement) |
210 |
+ $(add_kdeapps_dep kldap) |
211 |
+ $(add_kdeapps_dep kmailtransport) |
212 |
+ $(add_kdeapps_dep kmbox) |
213 |
+ $(add_kdeapps_dep kmime) |
214 |
+ $(add_kdeapps_dep kpimtextedit) |
215 |
+ $(add_kdeapps_dep libgravatar) |
216 |
+ $(add_kdeapps_dep libkdepim) |
217 |
+ $(add_kdeapps_dep libkleo) |
218 |
+ $(add_qt_dep qtgui) |
219 |
+ $(add_qt_dep qtnetwork) |
220 |
+ $(add_qt_dep qtprintsupport) |
221 |
+ $(add_qt_dep qtwebengine 'widgets') |
222 |
+ $(add_qt_dep qtwidgets) |
223 |
+ >=app-crypt/gpgme-1.8.0-r1[cxx,qt5] |
224 |
+ >=dev-libs/grantlee-5.1.0:5 |
225 |
+" |
226 |
+RDEPEND="${DEPEND} |
227 |
+ !kde-apps/kdepim-common-libs:4 |
228 |
+ !kde-apps/kdepim-l10n |
229 |
+ !=kde-apps/kmail-4.4*:4 |
230 |
+" |
231 |
+ |
232 |
+# bug 579630 |
233 |
+RESTRICT+=" test" |
234 |
+ |
235 |
+PATCHES=( |
236 |
+ "${FILESDIR}/${P}-newmail-crash.patch" |
237 |
+ "${FILESDIR}/${PN}-18.08.3-CVE-2018-19516.patch" |
238 |
+) |