Opened 3 years ago

Closed 3 years ago

#16151 closed enhancement (fixed)

add polkit security patch for CVE-2021-4115

Reported by: Xi Ruoyao Owned by: Douglas R. Reno
Priority: elevated Milestone: 11.2
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

There is a local DoS vulnerability in polkit. Patch:

​https://gitlab.freedesktop.org/polkit/polkit/-/commit/41cb093f554da8772362654a128a84dd8a5542a7.patch

Change History (5)

comment:1 by Xi Ruoyao, 3 years ago

I'd mark this a low severity vulnerability. The worst thing can be caused is a crash of polkitd. And when it's needed next time it will be activated by d-bus anyway (at least on systemd revision).

comment:2 by Douglas R. Reno, 3 years ago

Owner: changed from blfs-book to Douglas R. Reno
Status: new → assigned

comment:3 by Douglas R. Reno, 3 years ago

The existing security patch has been rediffed and will be named 'polkit-0.120-security_fixes-1.patch' since it has multiple fixes in it now instead of just one fix.

comment:4 by Douglas R. Reno, 3 years ago

Patch added to the repository

comment:5 by Douglas R. Reno, 3 years ago

Resolution: → fixed
Status: assigned → closed

Fixed at 4483a9ae1213b6e021e5d9d5629757dd4f7a1667

Note: See TracTickets for help on using tickets.