mbox series

[meta-oe,v3,0/2] polkit: switch from mozjs to duktape javascript engine

Message ID 20220325085627.45116-1-mikko.rapeli@bmw.de
Headers show
Series polkit: switch from mozjs to duktape javascript engine | expand

Message

Mikko Rapeli March 25, 2022, 8:56 a.m. UTC 
From: Mikko Rapeli <mikko.rapeli@bmw.de>

polkit 0.121 will contain support for duktape but the patch applies
to 0.119 already so use it to get rid of mozjs and free 20 Mb of space.
Pick some CVE patches from master while at it.

v3: rebased to master-next

v2: added Signed-off-By lines to all patches

Mikko Rapeli (2):
  polkit: add patches for CVE-2021-4034 and CVE-2021-4115
  polkit: switch from mozjs to duktape javascript engine

 ...l-privilege-escalation-CVE-2021-4034.patch |   84 +
 ...0002-CVE-2021-4115-GHSL-2021-077-fix.patch |   88 +
 .../0002-jsauthority-port-to-mozjs-91.patch   |   38 -
 ...ded-support-for-duktape-as-JS-engine.patch | 3463 +++++++++++++++++
 ...re-to-call-JS_Init-and-JS_ShutDown-e.patch |   63 -
 .../recipes-extended/polkit/polkit_0.119.bb   |    8 +-
 6 files changed, 3640 insertions(+), 104 deletions(-)
 create mode 100644 meta-oe/recipes-extended/polkit/polkit/0001-pkexec-local-privilege-escalation-CVE-2021-4034.patch
 create mode 100644 meta-oe/recipes-extended/polkit/polkit/0002-CVE-2021-4115-GHSL-2021-077-fix.patch
 delete mode 100644 meta-oe/recipes-extended/polkit/polkit/0002-jsauthority-port-to-mozjs-91.patch
 create mode 100644 meta-oe/recipes-extended/polkit/polkit/0003-Added-support-for-duktape-as-JS-engine.patch
 delete mode 100644 meta-oe/recipes-extended/polkit/polkit/0003-jsauthority-ensure-to-call-JS_Init-and-JS_ShutDown-e.patch