Ubuntu
kde4libs package

  1. Bug #1178286
  2. Comment #20

Comment 20 for bug 1178286

Revision history for this message
In , Kevin-kofler (kevin-kofler) wrote :

Created attachment 79887
kdelibs-3.5.10-CVE-2013-2074.patch

For reference (and for other distros which still ship kdelibs3), here's my tentative kdelibs3 patch. In addition to what you fixed, this patch also fixes the debugging output (fixed in 4.x by an earlier commit), the 2 spots I pointed out above, and 1 additional one I can't find in the 4.10 code (the error(ERR_ACCESS_DENIED, u.url()); line – it apparently got rewritten or removed).