From 65637cf9e27768a215a11201273830523da90d19 Mon Sep 17 00:00:00 2001 From: Eric Hameleers Date: Sun, 9 Dec 2018 23:44:44 +0100 Subject: Don't ask... this patch works, the first version did not apply --- kde/patch/messagelib/messagelib_CVE-2018-19516.patch | 18 +++++------------- 1 file changed, 5 insertions(+), 13 deletions(-) (limited to 'kde') diff --git a/kde/patch/messagelib/messagelib_CVE-2018-19516.patch b/kde/patch/messagelib/messagelib_CVE-2018-19516.patch index fc44974..599dd39 100644 --- a/kde/patch/messagelib/messagelib_CVE-2018-19516.patch +++ b/kde/patch/messagelib/messagelib_CVE-2018-19516.patch @@ -3,18 +3,13 @@ From: Laurent Montel Date: Fri, 23 Nov 2018 07:37:02 +0100 Subject: Exclude Refresh from MetaData (Not necessary) ---- - messageviewer/src/messagepartthemes/default/defaultrenderer.cpp | 5 +++++ - 1 file changed, 5 insertions(+) - -diff --git a/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp b/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp -index 15ffe44..07de293 100644 ---- a/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp -+++ b/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp -@@ -308,6 +308,11 @@ QString processHtml(const QString &htmlSource, QString &extraHead) +diff -uar messagelib-18.08.3.orig/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp messagelib-18.08.3/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp +--- messagelib-18.08.3.orig/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp 2018-10-31 07:56:07.000000000 +0100 ++++ messagelib-18.08.3/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp 2018-12-09 23:38:11.009130622 +0100 +@@ -308,6 +308,11 @@ return htmlSource; } - extraHead = s.mid(startIndex + 6, endIndex - startIndex - 6); + extraHead = s.mid(startIndex + 6 , endIndex - startIndex - 6); + //Don't authorize to refresh content. + if (s.contains(QStringLiteral("http-equiv=\"REFRESH\""), Qt::CaseInsensitive)) { + extraHead.clear(); @@ -23,6 +18,3 @@ index 15ffe44..07de293 100644 s = s.mid(endIndex + 7).trimmed(); } --- -cgit v0.11.2 - -- cgit v1.2.3