package/sylpheed: fix CVE-2021-37746
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Sat, 14 Aug 2021 21:00:42 +0000 (23:00 +0200)
committerThomas Petazzoni <thomas.petazzoni@bootlin.com>
Sun, 15 Aug 2021 07:25:39 +0000 (09:25 +0200)
commit634dcbd50dd5cf4b25153689e61bcba45163c841
tree6f4d0ca07da6c8469a1531ba54fcba642ba9eda5
parent7b30697b316ea4e336abebeea34d5c6447688630
package/sylpheed: fix CVE-2021-37746

textview_uri_security_check in textview.c in Claws Mail before 3.18.0,
and Sylpheed through 3.7.0, does not have sufficient link checks before
accepting a click.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
package/sylpheed/0001-harden-link-checker-before-accepting-click.patch [new file with mode: 0644]
package/sylpheed/sylpheed.mk