[MacPorts] #63277: policykit: Update to 0.119

MacPorts noreply at macports.org
Thu Feb 3 23:21:22 UTC 2022


#63277: policykit: Update to 0.119
-------------------------+---------------------
  Reporter:  ryandesign  |      Owner:  dbevans
      Type:  update      |     Status:  closed
  Priority:  Normal      |  Milestone:
 Component:  ports       |    Version:
Resolution:  fixed       |   Keywords:
      Port:  policykit   |
-------------------------+---------------------
Changes (by neverpanic):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"fa29fe7f1282995888ce51761af4d08ca16646af/macports-ports"
 fa29fe7f1282995888ce51761af4d08ca16646af/macports-ports] (master):
 {{{
 #!ConfigurableCommitTicketReference repository="macports-ports"
 revision="fa29fe7f1282995888ce51761af4d08ca16646af"
 policykit: Update to 0.120 + 3 additional commits

 Add rudimentary support for the meson build system to the
 gobject_introspection PortGroup, which is used by polkit. This may need
 further adaption in case other build systems do not name their gobject
 introspection configure flag 'introspection'.

 Switch polkit to the meson build system, drop the autoconf related files
 and sections from the Portfile. Re-enable the livecheck that seems to
 have been disabled because of warning in upstream's NEWS file that has
 been also present in previous versions and was not a good reason to keep
 polkit at an older version.

 Fix CVE-2021-4034, a local privilege escalation in pkexec – although
 I have not verified whether this is exploitable on macOS.

 The updated polkit would require a newer mozjs – however, polkit
 upstream is working on replacing polkit with the much smaller and
 simpler to build duktape JavaScript engine, which will ship in 0.121.
 Instead of packaging the newer version of mozjs, I packaged duktape and
 pulled in the commit the enables using it. See
   https://gitlab.freedesktop.org/polkit/polkit/-/merge_requests/97
 for further discussion that suggests that pretty much all distributions
 will switch to duktape as soon as it is available.

 CVE: CVE-2021-4034
 Closes: https://trac.macports.org/ticket/63277
 }}}

-- 
Ticket URL: <https://trac.macports.org/ticket/63277#comment:3>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list