CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]    2014/09/18 08:35:18

Modified files:
        x11/kde4/libs  : Tag: OPENBSD_5_6 Makefile 
Added files:
        x11/kde4/libs/patches: Tag: OPENBSD_5_6 
                               
patch-kdecore_auth_backends_polkit-1_Polkit1Backend_cpp 

Log message:
Security fix for kdelibs 4.13 branch, CVE-2014-5033:

The KAuth framework uses polkit-1 API which tries to authenticate using the
requestors PID. This is prone to PID reuse race conditions.

More details here: http://www.kde.org/info/security/advisory-20140730-1.txt

reminded by jasper@

Reply via email to