Opened 6 years ago
Last modified 6 years ago
#12042 closed enhancement
polkit-0.116 (remove js52 from the book) — at Initial Version
Reported by: | Xi Ruoyao | Owned by: | blfs-book |
---|---|---|---|
Priority: | normal | Milestone: | 9.0 |
Component: | BOOK | Version: | SVN |
Severity: | normal | Keywords: | |
Cc: |
Description ¶
https://www.freedesktop.org/software/polkit/releases/polkit-0.116.tar.gz
Highlights: Fix of CVE-2018-19788, high UIDs caused overflow in polkit; Fix of CVE-2019-6133, kernel vulnerability (Slowfork) allowed local privilege escalation. Build requirements glib, gobject, gio >= 2.32 mozjs-60 gobject-introspection >= 0.6.2 (optional) pam (optional) ConsoleKit OR systemd Changes since polkit 0.115: Kyle Walker: Leaking zombie child processes Jan Rybar: Possible resource leak found by static analyzer Output messages tuneup Sanity fixes pkttyagent tty echo disabled on SIGINT Ray Strode: HACKING: add link to Code of Conduct Philip Withnall: polkitbackend: comment typos fix Zbigniew Jędrzejewski-Szmek: configure.ac: fix detection of systemd with cgroups v2 CVE-2018-19788 High UIDs overflow fix Colin Walters: CVE-2019-6133 Slowfork vulnerability fix Matthew Leeds: Allow unset process-uid Emmanuele Bassi Port the JS authority to mozjs-60 Göran Uddeborg: Use JS_EncodeStringToUTF8
Note:
See TracTickets
for help on using tickets.