mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-20 19:58:34 +00:00
Ankur Tyagi
34d752b5d7
Backport commit[1] identified by Debian as a fix. Details: https://nvd.nist.gov/vuln/detail/cve-2026-4948 [1] https://security-tracker.debian.org/tracker/CVE-2026-4948 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
39 lines
1.8 KiB
Diff
39 lines
1.8 KiB
Diff
From 8e2d8aa579164220624d6cd6520d904fe27cfa48 Mon Sep 17 00:00:00 2001
|
|
From: Sizhe Zhao <prc.zhao@outlook.com>
|
|
Date: Tue, 31 Mar 2026 20:46:50 +0800
|
|
Subject: [PATCH] fix(policy): use PK_ACTION_CONFIG for
|
|
set{ZoneSettings2,PolicySettings}
|
|
|
|
Reference: https://access.redhat.com/security/cve/cve-2026-4948
|
|
(cherry picked from commit 5fb3914ad830feff6cb2b0670457c60a323c6c6c)
|
|
|
|
CVE: CVE-2026-4948
|
|
Upstream-Status: Backport [https://github.com/firewalld/firewalld/commit/5fb3914ad830feff6cb2b0670457c60a323c6c6c]
|
|
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
|
---
|
|
src/firewall/server/firewalld.py | 4 ++--
|
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/src/firewall/server/firewalld.py b/src/firewall/server/firewalld.py
|
|
index 62802528..9f969d8d 100644
|
|
--- a/src/firewall/server/firewalld.py
|
|
+++ b/src/firewall/server/firewalld.py
|
|
@@ -938,7 +938,7 @@ class FirewallD(DbusServiceObject):
|
|
log.debug1("getZoneSettings2(%s)", zone)
|
|
return self.fw.zone.get_config_with_settings_dict(zone)
|
|
|
|
- @dbus_polkit_require_auth(config.dbus.PK_ACTION_CONFIG_INFO)
|
|
+ @dbus_polkit_require_auth(config.dbus.PK_ACTION_CONFIG)
|
|
@dbus_service_method(config.dbus.DBUS_INTERFACE_ZONE, in_signature="sa{sv}")
|
|
@dbus_handle_exceptions
|
|
def setZoneSettings2(self, zone, settings, sender=None):
|
|
@@ -965,7 +965,7 @@ class FirewallD(DbusServiceObject):
|
|
log.debug1("policy.getPolicySettings(%s)", policy)
|
|
return self.fw.policy.get_config_with_settings_dict(policy)
|
|
|
|
- @dbus_polkit_require_auth(config.dbus.PK_ACTION_CONFIG_INFO)
|
|
+ @dbus_polkit_require_auth(config.dbus.PK_ACTION_CONFIG)
|
|
@dbus_service_method(config.dbus.DBUS_INTERFACE_POLICY, in_signature="sa{sv}")
|
|
@dbus_handle_exceptions
|
|
def setPolicySettings(self, policy, settings, sender=None):
|