polkit: update to 0.119.

This commit is contained in:
Arda Demir 2021-08-09 00:25:34 +03:00 committed by Enno T. Boland
parent c5a1d370bf
commit da0f60d979
2 changed files with 9 additions and 30 deletions

View file

@ -1,27 +0,0 @@
From a04d13affe0fa53ff618e07aa8f57f4c0e3b9b81 Mon Sep 17 00:00:00 2001
From: Jan Rybar <jrybar@redhat.com>
Date: Wed, 2 Jun 2021 15:43:38 +0200
Subject: [PATCH] GHSL-2021-074: authentication bypass vulnerability in polkit
initial values returned if error caught
---
src/polkit/polkitsystembusname.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/src/polkit/polkitsystembusname.c b/src/polkit/polkitsystembusname.c
index 8daa12c..8ed1363 100644
--- a/src/polkit/polkitsystembusname.c
+++ b/src/polkit/polkitsystembusname.c
@@ -435,6 +435,9 @@ polkit_system_bus_name_get_creds_sync (PolkitSystemBusName *system_bus
while (!((data.retrieved_uid && data.retrieved_pid) || data.caught_error))
g_main_context_iteration (tmp_context, TRUE);
+ if (data.caught_error)
+ goto out;
+
if (out_uid)
*out_uid = data.uid;
if (out_pid)
--
GitLab

View file

@ -1,7 +1,7 @@
# Template file for 'polkit'
pkgname=polkit
version=0.118
revision=2
version=0.119
revision=1
build_style=gnu-configure
build_helper=gir
configure_args="$(vopt_enable gir introspection) -disable-static
@ -17,8 +17,9 @@ short_desc="Authorization Toolkit"
maintainer="Enno Boland <gottox@voidlinux.org>"
license="GPL-2.0-or-later"
homepage="https://www.freedesktop.org/wiki/Software/polkit"
changelog="https://gitlab.freedesktop.org/polkit/polkit/-/raw/master/NEWS"
distfiles="${FREEDESKTOP_SITE}/${pkgname}/releases/${pkgname}-${version}.tar.gz"
checksum=6d54e984e7072339f0d3147179e16e34e5fe0705158f259a765d772dcf78956b
checksum=c8579fdb86e94295404211285fee0722ad04893f0213e571bd75c00972fd1f5c
system_accounts="polkitd"
#replaces="polkit-elogind>=0"
#provides="polkit-elogind-${version}_${revision}"
@ -27,6 +28,11 @@ system_accounts="polkitd"
build_options="gir"
build_options_default="gir"
if [ "$XBPS_TARGET_LIBC" = "musl" ]; then
# see https://gitlab.freedesktop.org/polkit/polkit/-/issues/134
make_check=no
fi
pre_configure() {
autoreconf -fi
# Drop requirement of /sys/fs/cgroup/systemd test in configure... WTF.