Version in base suite: 5.20.5-3 Base version: plasma-discover_5.20.5-3 Target version: plasma-discover_5.20.5-3+deb11u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/p/plasma-discover/plasma-discover_5.20.5-3.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/p/plasma-discover/plasma-discover_5.20.5-3+deb11u1.dsc changelog | 8 ++++++++ patches/discover_dns.patch | 31 +++++++++++++++++++++++++++++++ patches/series | 1 + 3 files changed, 40 insertions(+) diff -Nru plasma-discover-5.20.5/debian/changelog plasma-discover-5.20.5/debian/changelog --- plasma-discover-5.20.5/debian/changelog 2021-03-10 22:53:46.000000000 +0000 +++ plasma-discover-5.20.5/debian/changelog 2022-02-22 21:20:28.000000000 +0000 @@ -1,3 +1,11 @@ +plasma-discover (5.20.5-3+deb11u1) bullseye; urgency=medium + + * Team upload. + * Cherry-pick commit to fix the Denial of Service bug in Discover + (Closes: #1006124). + + -- Patrick Franz Tue, 22 Feb 2022 22:20:28 +0100 + plasma-discover (5.20.5-3) unstable; urgency=medium [ Patrick Franz ] diff -Nru plasma-discover-5.20.5/debian/patches/discover_dns.patch plasma-discover-5.20.5/debian/patches/discover_dns.patch --- plasma-discover-5.20.5/debian/patches/discover_dns.patch 1970-01-01 00:00:00.000000000 +0000 +++ plasma-discover-5.20.5/debian/patches/discover_dns.patch 2022-02-22 21:20:28.000000000 +0000 @@ -0,0 +1,31 @@ +From efb34c2aa235b703bc55cb9b37fedebed0ac7df8 Mon Sep 17 00:00:00 2001 +From: Ben Cooksley +Date: Mon, 7 Feb 2022 06:39:12 +1300 +Subject: [PATCH] Disable the building of the KNS backend until it can be + corrected to not cause a Denial of Service attack on KDE.org infrastructure. + +(cherry picked from commit f66df3531670592960167f5060feeed6d6c792be) +--- + libdiscover/backends/CMakeLists.txt | 6 +++--- + 1 file changed, 3 insertions(+), 3 deletions(-) + +diff --git a/libdiscover/backends/CMakeLists.txt b/libdiscover/backends/CMakeLists.txt +index 5f87f639f..0fbdc524f 100644 +--- a/libdiscover/backends/CMakeLists.txt ++++ b/libdiscover/backends/CMakeLists.txt +@@ -8,9 +8,9 @@ function(add_unit_test name) + Qt5::Test Qt5::Core ${EXTRA_LIBS}) + endfunction() + +-if(KF5Attica_FOUND AND KF5NewStuff_FOUND) +- add_subdirectory(KNSBackend) +-endif() ++#if(KF5Attica_FOUND AND KF5NewStuff_FOUND) ++# add_subdirectory(KNSBackend) ++#endif() + + if(packagekitqt5_FOUND AND AppStreamQt_FOUND) + add_subdirectory(PackageKitBackend) +-- +GitLab + diff -Nru plasma-discover-5.20.5/debian/patches/series plasma-discover-5.20.5/debian/patches/series --- plasma-discover-5.20.5/debian/patches/series 2021-03-10 22:53:46.000000000 +0000 +++ plasma-discover-5.20.5/debian/patches/series 2022-02-22 21:20:28.000000000 +0000 @@ -1 +1,2 @@ https_only_links.patch +discover_dns.patch