projects / gentoo.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f2bda04) | patch
kde-apps/okular: Fix path traversal issue when extracting .okular file
authorAndreas Sturmlechner <asturm@gentoo.org>
Mon, 10 Sep 2018 20:33:04 +0000 (22:33 +0200)
committerAndreas Sturmlechner <asturm@gentoo.org>
Mon, 10 Sep 2018 20:38:03 +0000 (22:38 +0200)
commit75a72fe24a730420ec692367e4e108d4a0a6d617
tree0b1c610e84086837b95cc7c508fce91eb6e1167atree | snapshot
parentf2bda04f7f7801f059717434c665e3ba7742f237commit | diff
kde-apps/okular: Fix path traversal issue when extracting .okular file

With a specially crafted .okular files it was possible to trick okular
to create temporary files outside the temporary folder.

Bug: https://bugs.gentoo.org/665662
KDE-Bug: https://bugs.kde.org/show_bug.cgi?id=398096
See also: https://phabricator.kde.org/D15192
Package-Manager: Portage-2.3.49, Repoman-2.3.10
kde-apps/okular/files/okular-18.04.3-path-traversal-issue.patch [new file with mode: 0644] blob
kde-apps/okular/okular-18.04.3-r1.ebuild [new file with mode: 0644] blob
Unnamed repository; edit this file 'description' to name the repository.