File CVE-2011-2725.patch of Package kdeutils4

--- a/ark/part/part.cpp.orig	2012-03-12 00:05:06.635813071 +0100
+++ b/ark/part/part.cpp	2012-03-12 01:59:23.088136607 +0100
@@ -476,6 +476,11 @@
         const ArchiveEntry& entry =  m_model->entryForIndex(m_view->selectionModel()->currentIndex());
         QString name = entry[ FileName ].toString().split('/', QString::SkipEmptyParts).last();
         QString fullName = m_previewDir->name() + '/' + name;
+        // Make sure a maliciously crafted archive with parent folders named ".." do
+        // not cause the previewed file path to be located outside the temporary
+        // directory, resulting in a directory traversal issue.
+        fullName.remove(QLatin1String("../"));
+
         ArkViewer::view(fullName, widget());
     } else {
         KMessageBox::error(widget(), job->errorString());
openSUSE Build Service is sponsored by