Commit Graph

144 Commits (8d7dfc5b0971dcb2d5a1e26b597d7168a90e9201)

Author SHA1 Message Date
Slávek Banko 8f6f381ff9 Fix security issue CVE-2017-6410
[taken from RedHat kdelibs patches]

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit a3b86c2690)
7 years ago
Michele Calgaro 74686afc04 Revert "Revert "Fix bug reports link in about dialog""
The reversion was done by mistake and inadvertently. Sorry for the
mess :-(

This reverts commit dcb480334c.
7 years ago
Michele Calgaro dcb480334c Revert "Fix bug reports link in about dialog"
This reverts commit 69fc44f5d5.
7 years ago
Slávek Banko 69fc44f5d5 Fix bug reports link in about dialog
Update bug reports url to bugs.trinitydesktop.org
This resolves bug 2935

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit aa83c86cd3)
7 years ago
Michele Calgaro 4c0290ecf1 Fix previous commit typo.
Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>
(cherry picked from commit c18840c76f)
7 years ago
Michele Calgaro 35f61f80a0 Fixed service lookup in KOpenWithDlg. Default is now to lookup by
desktop path and not by name, to avoid returning the wrong service when
two or more .desktop files where using the same "Name" field.
This resolves bug 2734 (together with the changes made in applications/kcmautostart)

Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>
(cherry picked from commit bcdfbb95e9)
7 years ago
Slávek Banko f23de663bb KSSL: Set hostname in TLSext to enable SNI support
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 45cf7d13eb)
8 years ago
Slávek Banko f83e4b4741 KSSL: Use TLS_client_method instead of TLSv1_client_method
This enables TLS protocols newer than v1.0
This resolves bug 2764

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit adb9d9d2b0)
8 years ago
Michele Calgaro 4c096c2168 Fixed code for tdefiledialog which caused the problem explained in bug
2743. Using the new code, editing the path information in a
tdefiledialog and pressing the "open/save" button will behave exactly in
the same way as if ENTER was pressed after editing the path and before
pressing "open/save".

Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>
(cherry picked from commit 05bcfa76fc)
8 years ago
Michele Calgaro 1d036d62d8 Reverted commit 53e36f6d (master), c8ff908d (r14.0.x)
Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>
8 years ago
Slávek Banko 7502543922 testing: Run tests that use DCOP in a temporary home
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit df203a23f4)
8 years ago
Slávek Banko 8d9229ab48 testing: run tdeio/kmimetypetest with temporary profile
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 4d3d8d8653)
8 years ago
Alexander Golubev 86921d65c5 tdeio: add tests
Signed-off-by: Alexander Golubev <fatzer2@gmail.com>
(cherry picked from commit ed74769bfa)
8 years ago
Alexander Golubev eea5f7e7c7 tdeio/kmimemagic: remove MAGIC_CONTINUE flag
This resolves bug 2713

The MAGIC_CONTINUE flag resulted in a malformed mimemagic responses
like "application/x-executable\012- application/octet-stream"
instead of just "application/x-executable".

This string being unparsed then caused the KMimeType::findByURL() to
fallback to application/octet-stream for nearly every mimetype.

Signed-off-by: Alexander Golubev <fatzer2@gmail.com>
(cherry picked from commit f54496a1f2)
8 years ago
Slávek Banko b8802de2c0 Added support for OpenSSL 1.1
Some KOpenSSLProxy methods have been renamed to be consistent
with OpenSSL 1.1 API names and to prevent hidden API changes.
To ensure API / ABI compatibility, the original methods are
still included but have been marked as deprecated.

+ SSLv23_client_method => TLS_client_method
+ X509_STORE_CTX_set_chain => X509_STORE_CTX_set0_untrusted
+ sk_dup => OPENSSL_sk_dup
+ sk_free => OPENSSL_sk_free
+ sk_new => OPENSSL_sk_new
+ sk_num => OPENSSL_sk_num
+ sk_pop => OPENSSL_sk_pop
+ sk_push => OPENSSL_sk_push
+ sk_value => OPENSSL_sk_value

Additional methods have been added to KOpenSSLProxy to support
the new OpenSSL 1.1 API functions that provide access to the
(now) opaque SSL structures. Compatibility with OpenSSL < 1.1
is handled internally in KOpenSSLProxy.

+ BIO_get_data
+ DSA_get0_key
+ DSA_get0_pqg
+ EVP_PKEY_base_id
+ EVP_PKEY_get0_DSA
+ EVP_PKEY_get0_RSA
+ RSA_get0_key
+ X509_CRL_get0_lastUpdate
+ X509_CRL_get0_nextUpdate
+ X509_OBJECT_get0_X509
+ X509_OBJECT_get_type
+ X509_STORE_CTX_get_current_cert
+ X509_STORE_CTX_get_error
+ X509_STORE_CTX_get_error_depth
+ X509_STORE_CTX_set_error
+ X509_STORE_get0_objects
+ X509_STORE_set_verify_cb
+ X509_get0_signature
+ X509_getm_notAfter
+ X509_getm_notBefore
+ X509_subject_name_cmp
+ _SSL_session_reused
+ _SSL_set_options

Method "KSSL::setSession" has been renamed to "KSSL::takeSession"
and its functionality has changed: the session is now transferred
from the argument object to the invoked object. Since it is only
used internally in TDE and the functionality is different, the
method with the previous name has not been preserved.

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>
(cherry picked from commit e1861cb681)
8 years ago
Timothy Pearson 855198315f Fix crash on KSSLCertificate deallocation when a CRL is held in the KSSLCertificate object
(cherry picked from commit 62a597d752)
8 years ago
Timothy Pearson aeb2bd0fe6 Fix memory leak when deleting a KSSLCertificate that holds a CRL
(cherry picked from commit 9bf244dd97)
8 years ago
Timothy Pearson 294100108c Add initial CRL support to KSSLCertificate
(cherry picked from commit 5896a404bc)
8 years ago
Slávek Banko 7c619136c6 Fix security issue CVE-2016-6232
Based on https://quickgit.kde.org/?p=karchive.git&a=commitdiff&h=0cb243f6

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 261a3b7a12)
8 years ago
Emanoil Kotsev 9c010f4f9c tdeio: fixed up certificate handling when certificate has expired. Also clean
up the code.

Signed-off-by: Emanoil Kotsev <deloptes@gmail.com>
Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>
(cherry picked from commit f3fadb884d)
8 years ago
Emanoil Kotsev 46887a349e Fixed handling of certificate "permanent" acceptance. This relates to
bug 1287.
Signed-off-by: Emanoil Kotsev <deloptes@gmail.com>

Partially cleaned up and modified.
Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>

(cherry picked from commit 7406ed0563)
8 years ago
Michele Calgaro c8ff908d9e Fixed two issues with KFileDialog:
- if the user types a new path manually, the new location was not used. Instead the older path was taken.
  In case the typed path does not exists, an error message is displayed
- if the user selected a path from the autocompletion lists using the mouse, the new selected location was
  not used when slotOK was invoked.
This resolves bug 2654.

Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>
(cherry picked from commit 53e36f6db0)
9 years ago
Timothy Pearson 515aec93f3 Parse GENERALIZEDTIME ASN structures
This fixes certificate dates beyond year 2049.

(cherry picked from commit 07dbb3b5c9)
9 years ago
Timothy Pearson 0d22b7ffc6 Fix compiler warnings
(cherry picked from commit 5e9959ef85)
9 years ago
Timothy Pearson 1785180455 Fix invalid headers in PNG files and optimize for size
(cherry picked from commit 7faae2b255)
9 years ago
Slávek Banko bf0778ad55 Fix FTBFS due to non-existent include
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 0b90885d90)
9 years ago
Slávek Banko 29bb34d2ff Remove warnings about missing embedded ELF icons
Add file name for which the issue occurs into debug message

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 491c2e4503)
9 years ago
Slávek Banko 10f97f0a42 Compile MIME magic file
This partially resolves Bug 2217

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 026a0ccdcd)
9 years ago
Slávek Banko 070b4f3f55 Revert a small portion of commit e0b1bfb0
This resolves Bug 2562

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 1540a5aade)
9 years ago
Slávek Banko a054c133c7 Fix mimetype detection using magic library
for mime types not contained in TDE settings
This resolves Bug 2392

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit b0ac7d2879)
9 years ago
Nikolaus Klepp 91b7be12b4 Fix FTBFS on freebsd
This resolves Bug 2431

Signed-off-by: Nikolaus Klepp <office@klepp.biz>
(cherry picked from commit 3be9f300c9)
10 years ago
Slávek Banko 182f65f099 Improve ACL detection for CMake build
Fix hidden visibility in posixacladdons

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit 6ebff39751)
10 years ago
Slávek Banko 54c9be2c4c Add include directory for internal libltdl
Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit dfd680030c)
10 years ago
Michele Calgaro eab791787c Fixed wrong DocPath strings. This relates to bug 2319
(cherry picked from commit a1f23c813a)
Signed-off-by: Michele Calgaro <michele.calgaro@yahoo.it>
10 years ago
Timothy Pearson 6ddd04baca Properly identify desktop files
This resolves a rather major glitch with Device Links noted on the mailing list
10 years ago
Timothy Pearson e0b1bfb014 Fix a number of build warnings 10 years ago
Timothy Pearson 6c097e6ff1 Read from X-DocPath only 10 years ago
Timothy Pearson f12e618a17 Fix stragglers that were not properly renamed in the XDG standardization commits 10 years ago
Timothy Pearson 207e134713 Fix exec icon location and bring it into XDG compliance 10 years ago
Timothy Pearson 6111385e9a Fix remaining issues from mimetype icon rename 10 years ago
Timothy Pearson db7f8030fa Repair mimetype icon usage, part 1. The following are not fully verified in source as of this commit due to ubiquity: info, unknown 10 years ago
Timothy Pearson 2cd1515186 Bring most mimetypes in line with XDG specifications. The following are not fully verified in source as of this commit due to ubiquity: html, empty, info, make, man, misc, source, unknown 10 years ago
Timothy Pearson ce1138c8ba Bring mail_forward, mail_new, mail_replyall, mail_reply, mail_send, player_pause, player_play, player_stop, player_rew, player_fwd, player_start, player_end, rotate_ccw, rotate_cw, window_fullscreen, window_nofullscreen, window_new, viewmagfit, viewmag+, viewmag1, and viewmag- icons into XDG compliance 10 years ago
Timothy Pearson bab4f22f92 Bring filenew, fileopen, fileprint, filequickprint, filesave, filesaveas, fileclose, editclear, editcopy, editcut, editdelete, editpaste, folder_new, and gohome icons into XDG compliance 10 years ago
Timothy Pearson acc29a93bb Fix incorrect Download string in TDEFileSpeedBar 10 years ago
Timothy Pearson ff57382179 Second part of prior commit 11 years ago
Timothy Pearson d46b1b9c64 Fix ServiceTypes, ExcludeServiceTypes, and DocPath desktop file entries to match XDG specifications 11 years ago
Timothy Pearson e95efe5790 Second part of prior commit 11 years ago
François Andriot 8f11758253 Fix FTBFS with libmagic < 4.23 11 years ago
Slávek Banko 03a61295af Fix FTBFS on missing magic_getpath 11 years ago