[#] http://marc.info/?l=openbsd-ports-cvs&m=140909454815417&w=2
openbsd-ports-cvs(obsdave,2) — All
2014-08-27 03:55:11


Module name: ports
Changes by: zhuk@cvs.openbsd.org 2014/08/26 17:08:45

Modified files:
x11/kde4/libs : Tag: OPENBSD_5_5 Makefile
Added files:
x11/kde4/libs/patches: Tag: OPENBSD_5_5
patch-kdecore_auth_backends_polkit-1_Polkit1Backend_cpp

Log message:
Security fix for kdelibs 4.11 branch, CVE-2014-5033:

The KAuth framework uses polkit-1 API which tries to authenticate using the
requestors PID. This is prone to PID reuse race conditions.

More details here: <a href="http://www.kde.org/info/security/advisory-20140730-1.txt" rel="nofollow">http://www.kde.org/info/security/advisory-20140730-1.txt</a>

okay jca@, "I trust you" naddy@