[ptxdist] polkit <= 0.120 CVE-2021-4034

[ptxdist] polkit <= 0.120 CVE-2021-4034

[Christian Melki]

Hi.

Friendly reminder for polkit.
0.120+ not yet released (at time of writing).
So either 0.120 + patch or wait for release.

But CVE is pretty severe, so it needs to be updated.

Regards,
Christian

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] polkit <= 0.120 CVE-2021-4034

[Michael Olbrich]

Hi,

On Wed, Jan 26, 2022 at 02:11:54PM +0100, Christian Melki wrote:
> Friendly reminder for polkit.
> 0.120+ not yet released (at time of writing).
> So either 0.120 + patch or wait for release.

PTXdist has 0.105 anyways, because that's the last version that doesn't
require a JavaScript engine.

I'm currently updating the patches that are imported from Debian. The
latest version contain a backport of the CVE fix.
That should hit PTXdist master soon.

> But CVE is pretty severe, so it needs to be updated.

Michael

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de