polkit: fix CVE-2021-3560.
This commit is contained in:
parent
35d47c945e
commit
f93bd4879d
|
@ -0,0 +1,27 @@
|
||||||
|
From a04d13affe0fa53ff618e07aa8f57f4c0e3b9b81 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Jan Rybar <jrybar@redhat.com>
|
||||||
|
Date: Wed, 2 Jun 2021 15:43:38 +0200
|
||||||
|
Subject: [PATCH] GHSL-2021-074: authentication bypass vulnerability in polkit
|
||||||
|
|
||||||
|
initial values returned if error caught
|
||||||
|
---
|
||||||
|
src/polkit/polkitsystembusname.c | 3 +++
|
||||||
|
1 file changed, 3 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/src/polkit/polkitsystembusname.c b/src/polkit/polkitsystembusname.c
|
||||||
|
index 8daa12c..8ed1363 100644
|
||||||
|
--- src/polkit/polkitsystembusname.c
|
||||||
|
+++ src/polkit/polkitsystembusname.c
|
||||||
|
@@ -435,6 +435,9 @@ polkit_system_bus_name_get_creds_sync (PolkitSystemBusName *system_bus
|
||||||
|
while (!((data.retrieved_uid && data.retrieved_pid) || data.caught_error))
|
||||||
|
g_main_context_iteration (tmp_context, TRUE);
|
||||||
|
|
||||||
|
+ if (data.caught_error)
|
||||||
|
+ goto out;
|
||||||
|
+
|
||||||
|
if (out_uid)
|
||||||
|
*out_uid = data.uid;
|
||||||
|
if (out_pid)
|
||||||
|
--
|
||||||
|
GitLab
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
# Template file for 'polkit'
|
# Template file for 'polkit'
|
||||||
pkgname=polkit
|
pkgname=polkit
|
||||||
version=0.118
|
version=0.118
|
||||||
revision=1
|
revision=2
|
||||||
build_style=gnu-configure
|
build_style=gnu-configure
|
||||||
build_helper=gir
|
build_helper=gir
|
||||||
configure_args="$(vopt_enable gir introspection) -disable-static
|
configure_args="$(vopt_enable gir introspection) -disable-static
|
||||||
|
|
Loading…
Reference in New Issue