Changeset 7e280b45

Timestamp:

01/26/2022 04:56:23 PM (2 years ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

f8635807

Parents:

feb043a

git-author:

Xi Ruoyao <xry111@…> (01/26/2022 04:48:35 PM)

git-committer:

Xi Ruoyao <xry111@…> (01/26/2022 04:56:23 PM)

Message:

polkit: add patch to fix CVE-2021-4034 (#16012)

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• postlfs/security/polkit.xml (modified) (3 diffs)

introduction/welcome/changelog.xml

@@ -43 +43 @@
     -->
     <listitem>
+      <para>January 26th, 2022</para>
+      <itemizedlist>
+        <listitem>
+          <para>[xry111] - Add patch to fix CVE-2021-4034 for polkit.
+          Fixes <ulink url="&blfs-ticket-root;16012">#16012</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>January 25th, 2022</para>
       <itemizedlist>

postlfs/security/polkit.xml

@@ -71 +71 @@
     </itemizedlist>
 
-<!-- With the move to meson, the patch is no longer needed
-    <bridgehead renderas="sect3"
-                revision="sysv">Additional Downloads</bridgehead>
-    <itemizedlist spacing="compact" revision="sysv">
-      <listitem>
-        <para>
-          Recommended patch:
-          <ulink url="&patch-root;/polkit-&polkit-version;-fix_elogind_detection-1.patch"/>
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/polkit-&polkit-version;-security_fix-1.patch"/>
         </para>
       </listitem>
     </itemizedlist>
--->
 
     <bridgehead renderas="sect3">Polkit Dependencies</bridgehead>
@@ -218 +215 @@
 sed '/policy,/d' -i actions/meson.build \
                  -i src/examples/meson.build</userinput></screen>
+
+    <para>
+      Apply a patch to fix a security issue:
+    </para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../polkit-&polkit-version;-security_fix-1.patch</userinput></screen>
+
     <para>
       Install <application>Polkit</application> by running the following
@@ -273 +277 @@
   <sect2 role="commands">
     <title>Command Explanations</title>
+
+    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
+      href="../../xincludes/meson-buildtype-release.xml"/>
 
     <!--