Bug 513926

Summary: Get New Fonts sent me to a suspicious website
Product: [Frameworks and Libraries] frameworks-knewstuff Reporter: colin.r.norris+kde
Component: generalAssignee: Dan Leinir Turthra Jensen <admin>
Status: REPORTED ---    
Severity: normal CC: alexander.lohnau, kdelibs-bugs-null
Priority: NOR    
Version First Reported In: 6.21.0   
Target Milestone: ---   
Platform: Other   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description colin.r.norris+kde 2025-12-28 20:14:44 UTC 
SUMMARY
I opened "Get New Fonts" from System Settings and tried to install the "MS True Type core fonts by SeanParsons" package but it sent me to a suspicious looking website (https://www.filecroco.c*o*m/file-sharing/ - I added wildcards to avoid linking to it here). I think it redirected there from a now-defunct URL (https://thelinuxbox.o*r*g/?page_id=3). I realize that this is "user-created content" and not directly a part of the KDE project, but I think if there's risk of sending users to random websites it would be better to deprecate this whole "Get New Fonts" feature and let people rely on their distro's package manager for fonts.

STEPS TO REPRODUCE
1. Open "Get New Fonts"
2. Try to install either of the "6,760 Fonts" or "MS True Type core fonts" packages
3. Get an error asking you to to visit a website instead
4. Click the link, browser opens
5. Original URL silently redirects to a suspicious website

OBSERVED RESULT
User ends up at a suspicious website.

EXPECTED RESULT
Fonts install.

SOFTWARE/OS VERSIONS
Operating System: Fedora Linux 43
KDE Plasma Version: 6.5.4
KDE Frameworks Version: 6.21.0
Qt Version: 6.10.1

ADDITIONAL INFORMATION