HomeFreeBSD

Add upstream fixes for CVE-2017-8422 to x11/kdelibs4 and devel/kf5-kauth

Description

Add upstream fixes for CVE-2017-8422 to x11/kdelibs4 and devel/kf5-kauth

KAuth contains a logic flaw in which the service invoking dbus
is not properly checked.

This allows spoofing the identity of the caller and with some
carefully crafted calls can lead to gaining root from an
unprivileged account.

https://www.kde.org/info/security/advisory-20170510-1.txt

Reviewed by: rakuco
Approved by: rakuco (mentor)
Obtained from: https://www.kde.org/info/security/advisory-20170510-1.txt
MFH: 2017Q2
Security: CVE-2017-8422
Differential Revision: https://reviews.freebsd.org/D10660

Details

Provenance
tcbernerAuthored on
Reviewer
rakuco
Differential Revision
D10660: Add patches for CVE-2017-8422 in x11/kdelibs4 and devel/kf5-kauth
Parents
rP440555: Document kauth privilege escalation.
Branches
Unknown
Tags
Unknown