libpolkit0-32bit-0.116-150200.3.12.1 < > , _ erp9| N<㣅քtF$?qet{n7]._8 K]f=%#z`8p${p +z!
W,O툔44A0u<.8,P̃xZi6 K~1 . DXl ZiA`oa
n@2B_P)@BArN 1_H+mbN6ڰ[xI%sMF vgxp+?vͽ] W&5'hZ > > l ? \ d ' V $ ( A b t
4 D ( 8 9 H : > G H I ( X , Y < \ h ] x ^ b c d ) e . f 1 l 3 u H v X w x y X C libpolkit0-32bit 0.116 150200.3.12.1 PolicyKit Authorization Framework -- Libraries PolicyKit is a toolkit for defining and handling authorizations.
It is used for allowing unprivileged processes to speak to privileged
processes.
This package contains the libraries only. erh01-ch4d SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://www.freedesktop.org/wiki/Software/polkit/ linux x86_64 /sbin/ldconfig $ t erererer 7b52683f76594cb80e2eb9ca46ba8b6a275f810582d34ec5fee96587b55f597f 7e4972b05ff57541333395ce11e2c035f1f541ab3b4d2665ace8af4ad5e3cf8f libpolkit-agent-1.so.0.0.0 libpolkit-gobject-1.so.0.0.0 root root root root root root root root polkit-0.116-150200.3.12.1.src.rpm libpolkit-agent-1.so.0 libpolkit-gobject-1.so.0 libpolkit0-32bit libpolkit0-32bit(x86-32) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.2) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.4) libgio-2.0.so.0 libglib-2.0.so.0 libgobject-2.0.so.0 libpolkit-gobject-1.so.0 libpthread.so.0 libpthread.so.0(GLIBC_2.0) libsystemd.so.0 libsystemd.so.0(LIBSYSTEMD_209) libsystemd.so.0(LIBSYSTEMD_213) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 d$(@b a@`]@]z@\t@\g\\@[v[E@ZUZ@ZY@Y?WXWV@VV@UL@T@T@jsegitz@suse.com rfrohl@suse.com meissner@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com dimstar@opensuse.org mvetter@suse.com meissner@suse.com bjorn.lie@gmail.com meissner@suse.com bjorn.lie@gmail.com schwab@suse.de dimstar@opensuse.org dimstar@opensuse.org lnussel@suse.de fbui@suse.com fbui@suse.com meissner@suse.com antoine.belvire@laposte.net tchvatal@suse.com meissner@suse.com - Change permissions for rules folders (bsc#1209282) - CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
added CVE-2021-4115.patch - CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
added CVE-2021-4034-pkexec-fix.patch - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
(bsc#1186497)
CVE-2021-3560.patch - Fix usage of libexecdir instead of prefix/lib where applicable. - polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053) - Update to version 0.116:
+ Leaking zombie child processes.
+ Possible resource leak found by static analyzer.
+ Output messages tuneup.
+ Sanity fixes.
+ pkttyagent tty echo disabled on SIGINT.
+ HACKING: add link to Code of Conduct.
+ polkitbackend: comment typos fix.
+ configure.ac: fix detection of systemd with cgroups v2.
+ CVE-2018-19788 High UIDs overflow fix.
+ CVE-2019-6133 Slowfork vulnerability fix.
+ Allow unset process-uid.
+ Port the JS authority to mozjs-60.
+ Use JS_EncodeStringToUTF8.
+ Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
BuildRequires following upstreams changes.
- Drop patches fixed upstream:
+ polkit-fix-possible-resource-leak.patch
+ polkit-fix-leaking-zombie-child-processes.patch
+ polkit-CVE-2018-19788.patch
- Refresh patches with quilt. - Use systemd_ordering instead of systemd_requires: strictly
speaking, polkit does not require systemd to be present. Just
that when we install on a system with systemd (e.g outside
containers) we would want systemd to be present before
installing polkit. Help also reduce a cycle without special hacks
in systemd.spec. - bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
shadow - polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
(bsc#1118277 CVE-2018-19788) - Add polkit-fix-possible-resource-leak.patch: Fix possible
resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
zombie not reaped when js spawned process timed out (fdo#106021). - Update to version 0.115:
- Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
- jsauthority: pass "%s" format string to remaining report function
(obsoletes polkit-jsauthority-pass-format-string.patch) - Update to version 0.114:
+ Port to mozjs 52, the latest version of the firefox JavaScript
engine.
+ Add gettext support for policy files.
+ Fixes for various memory leaks.
+ Updated translations.
- Update keyring with Ray Strode public key.
- Drop with_systemd define and all conditionals and
polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
pkgconfig counterparts: pkgconfig(gio-unix-2.0),
pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
pass "%s" format string to remaining report function, patch from
upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
since a long time fixed (gh#systemd#58) (boo#954139). - pkexec.patch: pkexec: allow --version and --help even if not setuid - Modernize spec-file by calling spec-cleaner - Add polkit-itstools.patch: Add gettext support for .policy files. - Use gettext as fallback to get potential distro translations for
polkit actions. Similar mechnism as used for desktop file
translations. That way it's possible to use weblate to add
additional translations that are not provided by upstream
(polkit-gettext.patch). - Use pkgconfig() instead of requiring systemd package names directly. - systemd.pc is shipped by systemd main package (bsc#983167)
Strangely polkit wants systemd.pc to detect that the target system
is running systemd even if its configured to build systemd support... - polkit-revert-session-magic.patch: revert a session detection change
that could lead to sessions not being detected as active due to
a systemd bug. bsc#954139 - Update to 0.113:
* Fix CVE-2015-4625
* Fix CVE-2015-3256
* Fix CVE-2015-3255
* Fix CVE-2015-3218
* On systemd-213 and later, the “active” state is shared across
all sessions of an user, instead of being tracked separately
* pkexec: when not given a program to execute, runs the users’
shell by default
- Remove polkit-no-kded-leak.patch (upstreamed) - Try to fix kded leaking due to powerdevil exposing this issue in
polkit: (bsc#912889)
* polkit-no-kded-leak.patch - Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
ids. /bin/sh 0.116-150200.3.12.1 0.116-150200.3.12.1 libpolkit-agent-1.so.0 libpolkit-agent-1.so.0.0.0 libpolkit-gobject-1.so.0 libpolkit-gobject-1.so.0.0.0 /usr/lib/ -fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31767/SUSE_SLE-15-SP2_Update/2e03c4d362f8d370476985f1f4c3e35f-polkit.SUSE_SLE-15-SP2_Update drpm xz 5 x86_64-suse-linux ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a4986496b0572be1ed848cb9d43b517b72c31059, stripped ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a6dd51f702772ad6e9a2398e5e02e521431d93ab, stripped
P R
R R R R R R R R R
R R R P R R R R R R
R R
R R R R utf-8 2fbc1aa01b7ea6a9f0736c78be1225232a5991919dee872fddda54e65b78ac8b ? 7zXZ
! t/gg:] "k%ʽduLԦKU}WkQ1s5u{QzC
.;
. (L. v?kP I~ΑrԆkP|[A r;G, y.4S;[v10
-ywR B!CW ! `oZ Z 58(}b;?~a193 k%Se(7J eܒFK uk۟Ls3VTk8 y(n:G qE~}DZLSf ^PhA cU*%sצ%c
zAd@D
F`vBjm+𧵸]f]fۼNrD% [eHAIk&5e=@ZdO MA q&Z1_y5> Y.aRF|W]#Ѭ ɹ9ػ5i(X@ W2;in{'BD9\2?t>x׳ "^]XhG2ϗ *i,h2hu̢]rr4 L,=.M %j$!c(en?=Uįnof#J]dZBI0פb:wp%ϓ^.4+"š Z4FI,D҇:tv/` c*
%SqG8 dbC+Ӂz> Zg~yʤuqG!?S~u!TLLntK!$p -҈
,32B؉n:/8vXcySZ5si
z zu;6F2FCA]DX)FO!gW1%ztq yɻaZUhRna"9}s \27_rud^8 KFq͟VKW,&| UDPp,gw}~_'zhHqz/c:~ 5 n
R-@Cp}S[ }(/V AeBM(ƢLMfFy;S:T '1Hb_]= ø Vyetفok*'XNwtN
(bdak_,.$>6ι:W&_㽒K. )rW߁IiP=OّVmKv$}XN k%)K{\dShwnĄd q5@w ^6EA͵*;CFެRPtfQ]w$[bE}R.O ˚3ʩ(~_yY/x 2Յf1=Kj\J;oCzT+Wu/V [ zƣ>!#bt8W\%'K{
%dxZ7uÌN օT[@:Zcj,'X_?\T@h6܁|lR֖:x58/ohq Rv`p)x -# VJr dI^ (6TkB|+Qiwjׯjyf&P+jja7#1V۷.|{LJaaH(OLө 4UkL^ m{ ĵ8%KImSזRPLdqMPK'6\zLT`` ZppqjJ1G a i" fr`?L
;{PLC8l7) -CM7V#H8E*IX6@2F
ڶ
I5]XuMXImc eP`);V6 N2#̞RϯRD ;3 9.m4k_0<]qz,h$q3Og![
Ux,T$_X4Da9_(evGP- )>a5_aoxHtm`Ԩ4WR[-a/$3~AR+Pj)KK]tw
PpV JSj1kI)J۽u]Nv X GJ^e:nSOh{~fe1Gh9[ŧL, @3ӻ`MM4/CzJ6`@lQ B3&~=dKF٧uw0 ɮ_|saOR\$(Nzا|6:k9[fHznX&'E_KL#l-$9x#^ n;Knaႄ *M-$9>`2ZMa!tf{M&! 䶚iotw5!ZPg۫J?Ri>DY弅=#H8>YIO36N0!,>
/@BdmnQ
)!L1!b qrh]Vڰ,K \ǫ
" ?\ hB ^N =>?
J+!v&* ܌>|{k 藳as.#g)<R
$M? Bd"bQf
HwM_qn몙 $6("2iټ"k:/?YnbM]RVk(r+2XP-u Su_ !Y {Wv#'͎xw_ 'W)vI
]yABveQrK q )g
~ m {<֏yZaKND_1i/w@͠7SQ>Up?aFO4o^UҷNK" gKa+݄hEᨺS5DS3R!0̡g9T?J8T(3Rjmى.+^|U0@3?%&eu@ 0xJ" 8i/?[%d!T?$֫ $"Β)}mCWZEG3
v_y,zcGwh:0XINR8V2_?J[2EG^]#ܶg1OpFm($0xR 2SւG)P7,k;X _}JX,Qb
S
=jr
pR 05@~`9p G)1F8FrjBmÑM~H&VN(^|}|<=p4z쵍yL c{^*0=,m>{I`6 1jSן͢-N-QuşR!(bӷ~~a N鱋ۜd AG2-qmSWmvʍ5NU8(VxMLQ!ruҤ[B40D3I'ŧ=pU5*b1F_c+QoYk |^zvE?pU.Sy"`yѰ@B>q.]棛vF)9{CP>`3 ֈu/0d`Y94U*||?0YS,^Z.ӇeA,vЇvjjkcvA\eR
˜t-"ZbtK. ni lqV 薸0u J0-mo 1vˣAU@BRzbg9-jK\/[e n=/]-iZ~
aJ8[XᓿHgz- ڐagg00nmG BB z &PvW!c_[@ mk(zFn^ܥ 1\Ӿ:dMn2%;1}Rn
4;Éѝq
f皕
W
$j kuV K[K'u 2p#pl|b|x Q3&v~pKX}.BTuf%Y
1-Bx~ BGG=frZ%H+8>jW,`q[O j0N76/sT/2 ; bGy7D4aa|{h 9ǹWvu@~sF
@~ &CB$
y /, aDq̒~!94"KvcƲIwÊV#|ԮqWftHChQj^v*(ۇA!X|!@aOxÁ{ 5b+v*+ݹ ԍΆWS>OxUJA³wNU"0TY\l=(UjSwbh"%ݦ`jtDh_'=.LSʦZjeKiD TJ
R>4oUyp 'mfotпsG'SDk2\
@QgDjKa ZS
0a( ~ioiUGtu]p[t9i@^}af#aN2 0:BM'dZ'z542ɣF4bJ'EJfHfu?,7!!b/QIX^|w U'1'0@ IR. (4Uujl K頴ߜ*5a9+`Af<9kyii @fX
!aULEԝE8/t%$U(\O1uOzzTOni)s)hgDھBUE}iGS9hXTߘC=
R;g2^MezV=hs#=c\Nd+ҖrE&Øk`/rz;zKZe.nKe/NCzҏUV%W-_ԥYHtcf0ɅCCC.?5BMM%趖 j"Ο+A KW;fr?s S #y6Ϻ0u~k|O0m{r) ya+疩[Ffp z!
MPa7UȜdOz _"Z%s
|c\d8Ad-(a& C0h4.yFpRBg{\=_dC894DW/VNE`D
͆[ҩIp>of|P#qZ% A
Zʆ~kؕ">
Yjyzq=+ 3v]K.Y͕hp٠&uNX`lX*0j)l˛jxf˼;
@B2 wf<9^̜,0ʈ,MpL E%QH01 0?ů
}\3˽Kv3~x9-|ԠzUMc
n^ =TE+T#>|"Ϗ֫[4\ɭ ٲvǤ`m,f @E ;@4
Eä
ɘ :9%-}fhL 5.I*urʨ1Z𥅕Ci\ڻu f"ŷ-.m&)}" ^;Bx%h OЮ"MxLl >F M)o)rDÏS_e=GƄɜlSK",x5W5,4Cen//3j" xi[f>Dڥ f֦/*W`NMws +2SͰ컠&V,]@[E^fڌEԜPZSQ^ֲ*gC6%rYU5ۏsL:js7
S>
VP2$ м$j]Ik9父8A-Щ-j ί]c 5 <23~&-N2]4 z! 5C'ڳ#zٰoӪ )kd5})M_TֳKlN49dsY3 7fc|Wjp{/K@ Pr~^vh^2Z#; 4a̷P}mؕ (!բ{ ̨&_y>#M&\U +!Ra|ߞx=\?x!rP̷(
8a|ΫyB!a_W?IrՖzR{ 8u̟9̬ cv #@1w.8xsgB M6JxmzAaHda32D`H,B&#i<[]3fP![? |\6αlqr]¯vmN RZ$"B +h vy ;+hYUi%~bދM!pf~'K lO>()5m}
}MZ \u_l0ÌAw_#w6˟ ]ð+``|Msĩ9
IZɔMxYݥTTs eZwC%rɭEzr{ժr8+ ~M<~z/9rih:W`{KaΫRCjEaҠb?\C4Xs6Rr3#}LSs) ^:h Ý|v!x8)He ֏&F)0=(RC
_fl'YR }%2)8= ʗuXd-!!i T,o h[Z< CB.jFzlZ`^v$: !xs@ejCRpfa`Vt|uwHj̐r 02)c0LT Pτ I[KlV6|@ڹy&W7Ї,}ќ>W\$3ZiX!)՟s')l:q&NhAtU5j3O`*E&%C8Dzj:c?!CeRsws3}*1ہLAm/XWi>; *qct吔2 E52U: d*ZV y
χsC0#8d
0B/#l{ W&ݿF[4Y%h/e Q S?_j OnZdž DE#o6x|^嚍%_eTLS3Y/pD%IWY lZAHNP+"6Hfu2&/ڳHM 9x[ L3o* UUx3*EW*#hWCJ+VʡG%('QQ-0T083rL풎%&l{GQ99Gw0\6gQ>c91 *6LaT eyttF-xѭWTs @skA%-
裞\km1ݧ{ rƟ@-gRf WYG)Ii^?}ذ d;4b o(a mv{CKf _7i ^@Dsz+"W/ rXnH
'`b ]Z,}B7=Ƴ
&ed1=kZZC=քfhk:6DW ꅃ vS}:#ʒWNTb_'Ao644u\U|؞qM:W
{6E =$e }}~]Ͼz[\*-݇G(ae*Uo9Whn[z2s 7eJ#kxvV|9ĺ~걍EhMX UL\~o9d)<憿 Ϭ(cQC O.B%H?Ȧ!5 f^u;ě.} 3
SwWOqIc
?iQi5dH:!$"NRqI */ޥ,,L0qJ_&UѠO6g{ӱ LSj
t$ 4 ̓(;ıv3}/|%-neㄯ)#tqH*n-Z}2-.ь
O6v=#20oBA^? ie9tݦmGHv
AV Os_ QfxexvD\uňl^}k'
{W~Y]9;7 ؽ &p)#E{ $l^4~;:O65 x!pB5^
TphOwN,kGxXk?T"\l? >3ۀԦ[g7%M,= :g,A +$ ٚOݮ͵w{U?TY*Ҽ/
/ :SO?}cFg-y?ΔG٩A,]4_"pTmvP+Lj
n v'?~&G|\ 4Z?F 7 `mA 8;˪$8Oѩ {3,iW5=jRD xE]ZƻJ@es-R| Ui ?$[2re6Oɡ }/ecTVxG,{P|6vy4ݑG4BQYzx+w\kN3W_iBߢ"mzv$GPg^ꠥGj0Jml$]
<0,1:ܽ*JPfcvZfXL0ių+zRʦCHmmjIP )IҞg n{Y"WvC
6 R(
#c7ULtԓJ,V-I]2ԙ)W)'Udj3]T,O<8xnW!N-~C6c&Ug*\ s3$ :JzWyF1I'>8yj)FjhTp×%OΜniWE"M\xzپ[1] {wk՜-y@օJ\ NVsx.#?M̽/X K{$)WnlM u *# SQ2 GGzb$V);UÖu̒#D6J
)f !tAD(otE4%!@\s@b8Ͳ&\5
?sj`GˊrԜ m\Mㄞ8}Kսo5.dO>le 8yͷkxZ nul P~2$Ԃ
Ѧ,}7/N{ ^H4ƟbAضEi
"Kʾ=HP
hpOqk =SpoA_?n~y}g Ό7 Wi gɊD%I9#p?=đ -go_8WÚ',k :3䬎
*syR}¢ m^Z)N^Ɵ[wk1 i A|`¬,,. U*?>, i79듺EO=">RiürKaviuk
9<̌}ϽsM=
C3FVN`գY bMTM( k|1d*
gΚɗJƆv}lm/W*C@GT8ڃh*r9SfuBv c>o+ªؿqZi|X'a% {5Y"]K h$ MyjM
Fp uVqE1].6J
¶DnzjME!r
N w%FGJ=<5y!Dh˾y'Ywr1SEYpYS-f5(, ];ʿ%s!c0{ԗ4]9@uň!Pb\5aŔcRag#~¹a;X&$tQ|Z?wDls-< C̹Y)) iA}Df1w(Fqu<8}a9:
[ Y"X0oeS؍{ֶ!{cv%Ny1 Y}Uw62TkTT
4G %{q:3J/#$g6I^'t, i+8IV zcѥ`7B ^S1 B y%"ۆ[zB ȅ6v]*:.fF}E4Q k4_il*E`Q?!t?{'"5]t\X\ͳm݂ O8L7¢m[1M`O C
z騺S4F
vTC8g뀸W{@ UW9[S ~U A "6ԼWu bDZ~o/37I#SΤ2Oۯ t:?WQ Զ ^A/EºF/G<`Ol fz6wU6?& XN Qo;L3(u5Bqώf k7]W! '` UyhPO
iv%ԇu=,ê%=-'mAuk$5u3`BrUL iDK, (hzp]l\ԕxnŜs
?1Sau&wbJpTeV&ԖP@Q,]ü[= MczLlOnpq,>psT i?r5;d4q*W!zS3}H ZꔰU(FSuXZX;9I-${ǽ rB %?n{C6}' Kwh:2cT{ z4Hrqwxki?y )_"rk
?$S2K 4:LpiϷ`h3y j;ҧD:QjSiFvtɷ(QGCLa 22N c_U$ !_ *1펾wc32?+(} dGQ˄qy2HHP3% U)0pj9t ;1ʣ>BE;J {(9
٢]DE41 #Jwxx'J $Nˢ(t f]S6_H}[AG uĨCdq.+sʴr E/D߂hBqB
~ Uv/^657)J< #Kz c;u'ʭ+A3(~6%uFfnjuK`:;$#.pxOD+!נ8nL5; ,gn" Z;:}|
.9rlg̩u9Kֱ:Lk C`נsf潟iuí o -̘blz@+6=PC[.+"
m\Ywdy}tu}N'y&qQpt~XU[ӻǗiU{n?o^~s PV
<*F1^hl _K'+uin %o)*}2γ{䯘/p t} ^ ف#z6hW>!izuj%*y^LxP-Zl?D A
ㅢ]R|973t)f2YfKlm[cBbSp{ U;e[wZ/{p}[Av)3(?#SGVn#G
Yo\up =4jYz4)VDձ]hdayN;}l_lNasU>++dWj5{H*&n}?\4
|63B tҊ%s!9E J['tt xt =)/Q|Ldmm
A^\Dl3CnMX5Tw' =hJ!׀ߵ:0Noc: v .A
YZ