Praveen Kumar 87f82e5f1d polkit: fix CVE-2025-7519
A flaw was found in polkit. When processing an XML policy with 32 or
more nested elements in depth, an out-of-bounds write can be triggered.
This issue can lead to a crash or other unexpected behavior, and
arbitrary code execution is not discarded. To exploit this flaw, a
high-privilege account is needed as it's required to place the
malicious policy file properly.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-7519

Upstream-patch:
https://github.com/polkit-org/polkit/commit/107d3801361b9f9084f78710178e683391f1d245

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
2025-09-16 08:37:07 +02:00
2025-09-16 08:37:07 +02:00
2025-09-16 08:37:07 +02:00
2025-10-01 13:26:29 +02:00
2025-09-16 08:37:07 +02:00
2025-09-16 08:37:07 +02:00
2025-09-16 08:37:07 +02:00
2025-09-16 08:37:07 +02:00
2025-09-16 08:37:07 +02:00

Collection of layers for the OE-core universe

Main layer maintainer: Gyorgy Sarvari skandigraun@gmail.com

This repository is a collection of layers to suppliment OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme
129 MiB
0 Stars 1 Watchers 0 Forks
Languages
BitBake 85.1%
Shell 5.6%
NASL 3.4%
C 2.6%
Roff 1.8%
Other 1.3%