CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]    2014/08/26 17:14:27

Modified files:
        x11/kde4/libs  : Makefile 
Added files:
        x11/kde4/libs/patches: 
                               
patch-kdecore_auth_backends_polkit-1_Polkit1Backend_cpp 

Log message:
Security fix for kdelibs 4.13 branch, CVE-2014-5033:

The KAuth framework uses polkit-1 API which tries to authenticate using the
requestors PID. This is prone to PID reuse race conditions.

More details here: http://www.kde.org/info/security/advisory-20140730-1.txt

Reply via email to