Subject: CVS commit: pkgsrc/net/kdenetwork4
From: Mark Davies
Date: 2011-05-08 00:25:09
Message id: 20110507222509.45FA3175DD@cvs.netbsd.org
Log Message:
KGet does not properly sanitise the "name" attribute of the \ 
"file" element
of metalink files before using it to download files.
http://secunia.com/advisories/44124/
Files:
RevisionActionfile
1.23modifypkgsrc/net/kdenetwork4/Makefile
1.17modifypkgsrc/net/kdenetwork4/distinfo
1.1addpkgsrc/net/kdenetwork4/patches/patch-kget_ui_metalinkcreator_metalinker.cpp