CVS commit: pkgsrc/x11/konsole

["Mark Davies" <markd%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   markd
Date:           Fri Jun 20 02:35:50 UTC 2025

Modified Files:
        pkgsrc/x11/konsole: Makefile distinfo
Added Files:
        pkgsrc/x11/konsole/patches: patch-src_session_Session.cpp

Log Message:
konsole: backport fix for CVE-2025-49091


To generate a diff of this commit:
cvs rdiff -u -r1.87 -r1.88 pkgsrc/x11/konsole/Makefile
cvs rdiff -u -r1.17 -r1.18 pkgsrc/x11/konsole/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/x11/konsole/patches/patch-src_session_Session.cpp

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/x11/konsole/Makefile
diff -u pkgsrc/x11/konsole/Makefile:1.87 pkgsrc/x11/konsole/Makefile:1.88
--- pkgsrc/x11/konsole/Makefile:1.87    Thu Apr 24 14:16:17 2025
+++ pkgsrc/x11/konsole/Makefile Fri Jun 20 02:35:49 2025
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.87 2025/04/24 14:16:17 wiz Exp $
+# $NetBSD: Makefile,v 1.88 2025/06/20 02:35:49 markd Exp $
 
 DISTNAME=      konsole-${KAPPSVER}
-PKGREVISION=   9
+PKGREVISION=   10
 CATEGORIES=    x11
 
 HOMEPAGE=      http://kde.org/applications/system/konsole/

Index: pkgsrc/x11/konsole/distinfo
diff -u pkgsrc/x11/konsole/distinfo:1.17 pkgsrc/x11/konsole/distinfo:1.18
--- pkgsrc/x11/konsole/distinfo:1.17    Tue Feb  6 11:17:44 2024
+++ pkgsrc/x11/konsole/distinfo Fri Jun 20 02:35:49 2025
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.17 2024/02/06 11:17:44 markd Exp $
+$NetBSD: distinfo,v 1.18 2025/06/20 02:35:49 markd Exp $
 
 BLAKE2s (konsole-23.08.4.tar.xz) = 8ca4890a72a1f04392005c59c0b9f5468c95aedbcf2516338e305e2088eba62d
 SHA512 (konsole-23.08.4.tar.xz) = 7b6e8a3190290b82283adaf8da59cd41f14da9350ad8baa6340e37d8e8021c65694bda09b89ad3bcbf490a932ab16b2fc3182c0cafa70df189353dfc807cb5dc
 Size (konsole-23.08.4.tar.xz) = 1839412 bytes
 SHA1 (patch-src_ProcessInfo.cpp) = 6ca72a192f0fd852a2dcd1576715f2cb423af2bb
 SHA1 (patch-src_characters_CharacterColor.h) = 47e4d0d9660e4bc059c3416dd16a4b16c2f17f38
+SHA1 (patch-src_session_Session.cpp) = 873ec68b0fb1696efcaa293dcb9411232acc2a66

Added files:

Index: pkgsrc/x11/konsole/patches/patch-src_session_Session.cpp
diff -u /dev/null pkgsrc/x11/konsole/patches/patch-src_session_Session.cpp:1.1
--- /dev/null   Fri Jun 20 02:35:50 2025
+++ pkgsrc/x11/konsole/patches/patch-src_session_Session.cpp    Fri Jun 20 02:35:50 2025
@@ -0,0 +1,17 @@
+$NetBSD: patch-src_session_Session.cpp,v 1.1 2025/06/20 02:35:50 markd Exp $
+
+backport fix for CVE-2025-49091
+
+--- src/session/Session.cpp.orig       2023-12-05 03:11:17.000000000 +0000
++++ src/session/Session.cpp
+@@ -521,8 +521,10 @@ void Session::run()
+     // if a program was specified via setProgram(), but it couldn't be found (but a fallback was), print a warning
+     if (exec != checkProgram(_program)) {
+         terminalWarning(i18n("Could not find '%1', starting '%2' instead.  Please check your profile settings.", _program, exec));
++      _arguments.clear(); // ignore args if program is invalid
+     } else if (exec != checkProgram(exec)) {
+         terminalWarning(i18n("Could not find '%1', starting '%2' instead.  Please check your profile settings.", exec, checkProgram(exec)));
++      _arguments.clear(); // ignore args if program is invalid
+     }
+ 
+     // if no arguments are specified, fall back to program name