CVE-2017-6410 (#1427808)

.spec cosmetics, update URL

.gitignore

@@ -2,3 +2,4 @@
 /kio-5.27.0.tar.xz
 /kio-5.29.0.tar.xz
 /kio-5.31.0.tar.xz
+/0035-Sanitize-URLs-before-passing-them-to-FindProxyForURL.patch

kf5-kio.spec

@@ -1,12 +1,12 @@
 %global framework kio
 
-Name:           kf5-%{framework}
+Name:    kf5-%{framework}
 Version: 5.31.0
-Release: 1%{?dist}
-Summary:        KDE Frameworks 5 Tier 3 solution for filesystem abstraction
+Release: 2%{?dist}
+Summary: KDE Frameworks 5 Tier 3 solution for filesystem abstraction
 
-License:        GPLv2+ and MIT and BSD
-URL:            https://quickgit.kde.org/?p=%{framework}.git
+License: GPLv2+ and MIT and BSD
+URL:     https://cgit.kde.org/%{framework}.git
 
 %global versiondir %(echo %{version} | cut -d. -f1-2)
 %global revision %(echo %{version} | cut -d. -f3)
@@ -15,7 +15,10 @@ URL:            https://quickgit.kde.org/?p=%{framework}.git
 %else
 %global stable stable
 %endif
-Source0:        http://download.kde.org/%{stable}/frameworks/%{versiondir}/%{framework}-%{version}.tar.xz
+Source0: http://download.kde.org/%{stable}/frameworks/%{versiondir}/%{framework}-%{version}.tar.xz
+
+## upstream patches (lookaside cache)
+Patch35: 0035-Sanitize-URLs-before-passing-them-to-FindProxyForURL.patch
 
 # filter plugin provides
 %global __provides_exclude_from ^(%{_kf5_qtplugindir}/.*\\.so)$
@@ -265,6 +268,10 @@ fi
 
 
 %changelog
+* Thu Mar 02 2017 Rex Dieter <rdieter@fedoraproject.org> - 5.31.0-2
+- CVE-2017-6410 (#1427808)
+- .spec cosmetics, update URL
+
 * Mon Feb 06 2017 Rex Dieter <rdieter@fedoraproject.org> - 5.31.0-1
 - 5.31.0
 

sources

@@ -1 +1,2 @@
 SHA512 (kio-5.31.0.tar.xz) = 6e8f1cd8c06c132eee5e90734af58dfbc62dd5691a405c6547b6d544f9c622a5e914eb916652bc97b9002fec8ab2b3c5e59785f3d3a184dd537e9b8f490e3b38
+SHA512 (0035-Sanitize-URLs-before-passing-them-to-FindProxyForURL.patch) = 32178237dfc12bf399cf623020cccc7c326ba21a83a0c83d9f1a584d304eaefea15e472d82d9541f6314b19c0379f8c6b7481874034155e953c7bad3bfc17b45