Opened 22 hours ago

Last modified 6 hours ago

#24124 new enhancement

polkit-128

Reported by: Bruce Dubbs Owned by: SecurityAdvisory
Priority: elevated Milestone: 98-Security
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New version.

Change History (2)

comment:1 by Joe Locash, 7 hours ago

Owner: changed from blfs-book to Joe Locash
Status: new → assigned

comment:2 by Joe Locash, 6 hours ago

Milestone: 13.2 → 98-Security
Owner: changed from Joe Locash to SecurityAdvisory
Priority: normal → elevated
Severity: normal → medium
Status: assigned → new 
## polkit 128

### Highlights:
- fix two authentication-helper input vulnerabilities (CVE-2026-4897 and CVE-202
6-85498) [7e122c8, eea1729]
- sanitize values written to syslog from authorization requests [9dca831]
- fix a use-after-free in the authentication agent's session handling [6f3cec7]
- revalidate the administrator behind cached `auth_admin_keep` authorizations [9
a49bd6]
- fix agent cleanup races, resource leaks, and several error-path leaks [148422b
, 4e67dde, 8ceeed8, ac4d9ac, dae50d6]
- support systemd watchdog notifications and locked system accounts with systemd
 257+ [b3492d5, 13276c1]
- improve FreeBSD and Solaris portability, including tests without Linux user na
mespaces [c3aefa7, 3111583, 72c2878, 0453c24]
- add Kazakh, Serbian, and Serbian Latin translations; update Slovenian [6fe59cd
, 8a797e5, 0d87075]
- add a polkit-agent-helper manual page and expand contributor documentation [51
95b3a, 3ee2927, 935f9cd, 46df56e, d3ba690]
- remove the systemd service memory limits introduced in polkit 127 [44365bb]

Fixed at 0970bcf081. Leaving open for SA.

Note: See TracTickets for help on using tickets.