polkit-0.115 released
Iñigo Martínez
inigomartinez at gmail.com
Wed Jul 11 08:58:06 UTC 2018
Hello,
Some months ago I ported polkit to meson[0]. As you may know, meson has
become a popular build system, and a good enough alternative to autotools.
I remembered that the port was still floating around with the new version
announcement.
I would like to know if there is any interest on it, since now that a new
release has happened, it could be the right moment to invest some time
updating the port and merge it.
What do you think?
Best regards,
[0]
https://lists.freedesktop.org/archives/polkit-devel/2018-February/000581.html
2018-07-10 16:15 GMT+02:00 Miloslav Trmac <mitr at redhat.com>:
> Hello,
> polkit-0.115 is now available at
> http://www.freedesktop.org/software/polkit/releases/polkit-0.115.tar.gz
> http://www.freedesktop.org/software/polkit/releases/
> polkit-0.115.tar.gz.sign
>
> --------------
> polkit 0.115
> --------------
>
> WARNING WARNING WARNING: This is a prerelease on the road to polkit
> 1.0. Public API might change and certain parts of the code still needs
> some security review. Use at your own risk.
>
> This is polkit 0.115.
>
> Highlights:
> Fixes CVE-2018-1116, a local information disclosure and denial of service
> caused by trusting client-submitted UIDs when referencing processes.
> Thanks to Matthias Gerstner of the SUSE security team for reporting
> this issue.
>
> Build requirements
>
> glib, gobject, gio >= 2.32
> mozjs-52
> gobject-introspection >= 0.6.2 (optional)
> pam (optional)
> ConsoleKit OR systemd
>
> Changes since polkit 0.114:
>
> Miloslav Trmač (1):
> Fix CVE-2018-1116: Trusting client-supplied UID
>
> Ray Strode (3):
> Post-release version bump to 0.115
> jsauthority: pass "%s" format string to remaining report function
> NEWS: fix date from 2017 to 2018 for 0.114 entry
>
> Thanks to our contributors.
>
> Colin Walters and Miloslav Trmač,
> July 10, 2018
> _______________________________________________
> polkit-devel mailing list
> polkit-devel at lists.freedesktop.org
> https://lists.freedesktop.org/mailman/listinfo/polkit-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/polkit-devel/attachments/20180711/d18d4db2/attachment.html>
More information about the polkit-devel
mailing list