Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package polkit for openSUSE:Factory checked in at 2026-10-20 12:36:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/polkit (Old) and /work/SRC/openSUSE:Factory/.polkit.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "polkit" Tue Oct 20 12:36:20 2026 rev:104 rq:1386168 version:128 Changes: -------- --- /work/SRC/openSUSE:Factory/polkit/polkit.changes 2026-07-17 18:47:31.029280245 +0200 +++ /work/SRC/openSUSE:Factory/.polkit.new.3698736/polkit.changes 2026-10-20 12:36:44.129537927 +0200 @@ -1,0 +2,22 @@ +Fri Oct 16 07:47:59 UTC 2026 - Bjørn Lie <[email protected]> + +- Update to version 128 (CVE-2026-4897 and CVE-2026-85498): + * fix two authentication-helper input vulnerabilities (CVE-2026-4897 + bsc#1260859 and CVE-2026-85498 bsc#1278714). + * Sanitize values written to syslog from authorization requests + * Fix a use-after-free in the authentication agent's session handling + * Revalidate the administrator behind cached auth_admin_keep authorizations + * Fix agent cleanup races, resource leaks, and several error-path leaks + * Support systemd watchdog notifications and locked system accounts with + systemd 257+ + * Improve FreeBSD and Solaris portability, including tests without Linux user + namespaces + * Add a polkit-agent-helper manual page and expand contributor documentation + * Remove the systemd service memory limits introduced in polkit 127 + * Updated translations. +- Update version dependencies according to meson.build. +- Drop patches fixed upstream: + * 0001-Revert-memory-limits-in-systemd-unit-to-mitigate-mem.patch + * 0001-CVE-2026-4897-getline-string-overflow.patch + +------------------------------------------------------------------- Old: ---- 0001-CVE-2026-4897-getline-string-overflow.patch 0001-Revert-memory-limits-in-systemd-unit-to-mitigate-mem.patch 127.tar.gz New: ---- 128.tar.gz ----------(Old B)---------- Old: * 0001-Revert-memory-limits-in-systemd-unit-to-mitigate-mem.patch * 0001-CVE-2026-4897-getline-string-overflow.patch Old:- Drop patches fixed upstream: * 0001-Revert-memory-limits-in-systemd-unit-to-mitigate-mem.patch * 0001-CVE-2026-4897-getline-string-overflow.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ polkit.spec ++++++ --- /var/tmp/diff_new_pack.Uo2am5/_old 2026-10-20 12:36:44.988573740 +0200 +++ /var/tmp/diff_new_pack.Uo2am5/_new 2026-10-20 12:36:44.990573823 +0200 @@ -17,7 +17,7 @@ %define _polkit_rulesdir %{_datadir}/polkit-1/rules.d -%define glib_br_version 2.30.0 +%define glib_br_version 2.44 # qemu emulation creates multiple threads, so unshare(CLONE_THREAD) always # fails. %if !0%{?qemu_user_space_build} @@ -25,7 +25,7 @@ %endif Name: polkit -Version: 127 +Version: 128 Release: 0 Summary: PolicyKit Authorization Framework License: LGPL-2.1-or-later @@ -48,12 +48,6 @@ # PATCH-FIX-OPENSUSE polkit-adjust-libexec-path.patch -- Adjust path to polkit-agent-helper-1 (bsc#1180474) Patch4: polkit-adjust-libexec-path.patch -# PATCH-FIX-UPSTREAM 0001-CVE-2026-4897-getline-string-overflow.patch -- bsc#1260859 ... use a limited getline buffer to avoid endless reads -Patch5: 0001-CVE-2026-4897-getline-string-overflow.patch - -# PATCH-FIX-UPSTREAM 0001-Revert-memory-limits-in-systemd-unit-to-mitigate-mem.patch -- bsc#1266994 ... enabling this causes quite some performance drop -Patch6: 0001-Revert-memory-limits-in-systemd-unit-to-mitigate-mem.patch - BuildRequires: gcc-c++ BuildRequires: gettext-devel BuildRequires: gtk-doc @@ -259,6 +253,7 @@ %{_mandir}/man5/polkitd.conf.5%{?ext_man} %{_mandir}/man8/polkitd.8%{?ext_man} %{_mandir}/man8/polkit.8%{?ext_man} +%{_mandir}/man8/polkit-agent-helper.8%{?ext_man} %dir %{_datadir}/dbus-1 %dir %{_datadir}/dbus-1/system-services %{_datadir}/dbus-1/system-services/org.freedesktop.PolicyKit1.service ++++++ 127.tar.gz -> 128.tar.gz ++++++ ++++ 5957 lines of diff (skipped)
