Index: head/x11/kde4-runtime/Makefile
===================================================================
--- head/x11/kde4-runtime/Makefile	(revision 435965)
+++ head/x11/kde4-runtime/Makefile	(revision 435966)
@@ -1,69 +1,69 @@
 # $FreeBSD$
 
 PORTNAME=	kde-runtime
 PORTVERSION=	${KDE4_VERSION}
-PORTREVISION=	4
+PORTREVISION=	5
 CATEGORIES=	x11 kde kde-kde4
 
 MAINTAINER=	kde@FreeBSD.org
 COMMENT=	Runtime components for KDE Plasma Desktop
 
 LIB_DEPENDS=	libIlmImf.so:graphics/OpenEXR \
 		libexiv2.so:graphics/exiv2 \
 		libwebp.so:graphics/webp \
 		libslp.so:net/openslp \
 		libsmbclient.so:net/samba-libsmbclient \
 		libssh.so:security/libssh \
 		libqzeitgeist.so:sysutils/qzeitgeist
 # Explicitly depend on libssh to avoid interference with ssh.4 from
 # compat7x.
 BUILD_DEPENDS=	${LOCALBASE}/lib/libssh.so:security/libssh
 RUN_DEPENDS=	cagibid:net/cagibi
 
 USES=		cmake:outsource gettext gmake jpeg kde:4 shared-mime-info \
 		shebangfix tar:xz
 USE_KDE=	kactivities kdelibs oxygen-icons4 \
 		attica automoc4 pimlibs strigi nepomuk-core
 USE_QT4=	corelib dbus declarative designer_build gui phonon \
 		network qtestlib script svg webkit xml \
 		moc_build qmake_build rcc_build uic_build
 USE_XORG=	x11 xcursor
 USE_LDCONFIG=	yes
 MAKE_ENV=	XDG_CONFIG_HOME=/dev/null
 SHEBANG_FILES=	khelpcenter/searchhandlers/*.pl \
 		khelpcenter/searchhandlers/*.pl.cmake \
 		kioslave/info/kde-info2html
 
 OPTIONS_DEFINE=	PULSEAUDIO ZEITGEIST
 
 PULSEAUDIO_DESC=Audio configuration via PulseAudio
 PULSEAUDIO_LIB_DEPENDS=	libpulse.so:audio/pulseaudio \
 			libcanberra.so:audio/libcanberra
 PULSEAUDIO_USE=	GNOME=glib20
 PULSEAUDIO_CMAKE_OFF=	-DWITH_PulseAudio:BOOL=OFF
 
 ZEITGEIST_DESC=	Event logging via Zeitgeist
 ZEITGEIST_RUN_DEPENDS=	zeitgeist-daemon:sysutils/zeitgeist
 
 # Explicitly disable ALSA, see for details:
 # http://mail.kde.org/pipermail/kde-freebsd/2010-March/008015.html
 CMAKE_ARGS+=	-DWITH_ALSA:BOOL=OFF
 
 post-extract:
 # Don't install share/icons/hicolor/index.theme to avoid conflcit with
 # hicolor-icon-theme port
 	${REINPLACE_CMD} -e '/add_subdirectory.*hicolor/d' \
 		${PATCH_WRKSRC}/pics/CMakeLists.txt
 
 post-patch:
 	@${REINPLACE_CMD} -e 's,/usr/local,${LOCALBASE},g' \
 		${PATCH_WRKSRC}/khelpcenter/infotree.cpp \
 		${PATCH_WRKSRC}/kioslave/info/kde-info2html.conf \
 		${PATCH_WRKSRC}/kioslave/man/kio_man.cpp \
 		${PATCH_WRKSRC}/kioslave/man/man2html.cpp \
 		${PATCH_WRKSRC}/cmake/modules/FindCLucene.cmake
 	${REINPLACE_CMD} -e '/update_xdg_mimetypes/ d' \
 		${PATCH_WRKSRC}/kimgio/CMakeLists.txt \
 		${PATCH_WRKSRC}/kioslave/network/mimetypes/CMakeLists.txt
 
 .include <bsd.port.mk>
Index: head/x11/kde4-runtime/files/patch-kdesu_kdesu_kdesu.cpp
===================================================================
--- head/x11/kde4-runtime/files/patch-kdesu_kdesu_kdesu.cpp	(nonexistent)
+++ head/x11/kde4-runtime/files/patch-kdesu_kdesu_kdesu.cpp	(revision 435966)
@@ -0,0 +1,27 @@
+Fix for https://www.kde.org/info/security/advisory-20160930-1.txt
+--- kdesu/kdesu/kdesu.cpp.orig	2014-10-30 23:50:20 UTC
++++ kdesu/kdesu/kdesu.cpp
+@@ -141,6 +141,10 @@ int main(int argc, char *argv[])
+     {
+         KMessageBox::sorry(0, i18n("Cannot execute command '%1'.", QString::fromLocal8Bit(command)));
+     }
++    if (result == -2)
++    {
++        KMessageBox::sorry(0, i18n("Cannot execute command '%1'. It contains invalid characters.", QString::fromLocal8Bit(command)));
++    }
+ 
+     return result;
+ }
+@@ -367,6 +371,12 @@ static int startApp()
+         kDebug() << "Don't need password!!\n";
+     }
+ 
++    for (const QChar character : QString::fromLocal8Bit(command)) {
++        if (!character.isPrint() && character.category() != QChar::Other_Surrogate) {
++            return -2;
++        }
++    }
++
+     // Start the dialog
+     QString password;
+     if (needpw)

Property changes on: head/x11/kde4-runtime/files/patch-kdesu_kdesu_kdesu.cpp
___________________________________________________________________
Added: fbsd:nokeywords
## -0,0 +1 ##
+yes
\ No newline at end of property
Added: svn:eol-style
## -0,0 +1 ##
+native
\ No newline at end of property
Added: svn:mime-type
## -0,0 +1 ##
+text/plain
\ No newline at end of property