CVS commit: pkgsrc/security/polkit

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Oct 18 12:17:59 UTC 2026

Modified Files:
        pkgsrc/security/polkit: Makefile PLIST distinfo
Removed Files:
        pkgsrc/security/polkit/patches: patch-src_polkit_polkitunixprocess.c
            patch-src_polkitagent_polkitagenthelper-pam.c
            patch-src_polkitbackend_polkitbackendduktapeauthority.c
            patch-src_polkitbackend_polkitd.c patch-src_programs_pkttyagent.c

Log Message:
polkit: update to 128.

All pkgsrc patches were merged upstream.

## polkit 128

### Highlights:
- fix two authentication-helper input vulnerabilities (CVE-2026-4897 and CVE-2026-85498) [7e122c8, eea1729]
- sanitize values written to syslog from authorization requests [9dca831]
- fix a use-after-free in the authentication agent's session handling [6f3cec7]
- revalidate the administrator behind cached `auth_admin_keep` authorizations [9a49bd6]
- fix agent cleanup races, resource leaks, and several error-path leaks [148422b, 4e67dde, 8ceeed8, ac4d9ac, dae50d6]
- support systemd watchdog notifications and locked system accounts with systemd 257+ [b3492d5, 13276c1]
- improve FreeBSD and Solaris portability, including tests without Linux user namespaces [c3aefa7, 3111583, 72c2878, 0453c24]
- add Kazakh, Serbian, and Serbian Latin translations; update Slovenian [6fe59cd, 8a797e5, 0d87075]
- add a polkit-agent-helper manual page and expand contributor documentation [5195b3a, 3ee2927, 935f9cd, 46df56e, d3ba690]
- remove the systemd service memory limits introduced in polkit 127 [44365bb]


To generate a diff of this commit:
cvs rdiff -u -r1.65 -r1.66 pkgsrc/security/polkit/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/security/polkit/PLIST
cvs rdiff -u -r1.23 -r1.24 pkgsrc/security/polkit/distinfo
cvs rdiff -u -r1.8 -r0 \
    pkgsrc/security/polkit/patches/patch-src_polkit_polkitunixprocess.c
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/security/polkit/patches/patch-src_polkitagent_polkitagenthelper-pam.c
cvs rdiff -u -r1.4 -r0 \
    pkgsrc/security/polkit/patches/patch-src_polkitbackend_polkitbackendduktapeauthority.c \
    pkgsrc/security/polkit/patches/patch-src_polkitbackend_polkitd.c
cvs rdiff -u -r1.5 -r0 \
    pkgsrc/security/polkit/patches/patch-src_programs_pkttyagent.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/polkit/Makefile
diff -u pkgsrc/security/polkit/Makefile:1.65 pkgsrc/security/polkit/Makefile:1.66
--- pkgsrc/security/polkit/Makefile:1.65        Tue Sep 29 06:07:25 2026
+++ pkgsrc/security/polkit/Makefile     Sun Oct 18 12:17:58 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.65 2026/09/29 06:07:25 wiz Exp $
+# $NetBSD: Makefile,v 1.66 2026/10/18 12:17:58 wiz Exp $
 
-DISTNAME=      polkit-127
-PKGREVISION=   4
+DISTNAME=      polkit-128
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=polkit-org/}
 

Index: pkgsrc/security/polkit/PLIST
diff -u pkgsrc/security/polkit/PLIST:1.10 pkgsrc/security/polkit/PLIST:1.11
--- pkgsrc/security/polkit/PLIST:1.10   Sun Dec 21 15:44:05 2025
+++ pkgsrc/security/polkit/PLIST        Sun Oct 18 12:17:59 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.10 2025/12/21 15:44:05 wiz Exp $
+@comment $NetBSD: PLIST,v 1.11 2026/10/18 12:17:59 wiz Exp $
 bin/pkaction
 bin/pkcheck
 bin/pkexec
@@ -48,6 +48,7 @@ man/man1/pkcheck.1
 man/man1/pkexec.1
 man/man1/pkttyagent.1
 man/man5/polkitd.conf.5
+man/man8/polkit-agent-helper.8
 man/man8/polkit.8
 man/man8/polkitd.8
 share/dbus-1/system-services/org.freedesktop.PolicyKit1.service
@@ -67,6 +68,7 @@ share/locale/hu/LC_MESSAGES/polkit-1.mo
 share/locale/id/LC_MESSAGES/polkit-1.mo
 share/locale/it/LC_MESSAGES/polkit-1.mo
 share/locale/ka/LC_MESSAGES/polkit-1.mo
+share/locale/kk/LC_MESSAGES/polkit-1.mo
 share/locale/nl/LC_MESSAGES/polkit-1.mo
 share/locale/nn/LC_MESSAGES/polkit-1.mo
 share/locale/oc/LC_MESSAGES/polkit-1.mo
@@ -77,6 +79,8 @@ share/locale/ro/LC_MESSAGES/polkit-1.mo
 share/locale/ru/LC_MESSAGES/polkit-1.mo
 share/locale/sk/LC_MESSAGES/polkit-1.mo
 share/locale/sl/LC_MESSAGES/polkit-1.mo
+share/locale/sr/LC_MESSAGES/polkit-1.mo
+share/locale/sr@latin/LC_MESSAGES/polkit-1.mo
 share/locale/sv/LC_MESSAGES/polkit-1.mo
 share/locale/tr/LC_MESSAGES/polkit-1.mo
 share/locale/uk/LC_MESSAGES/polkit-1.mo

Index: pkgsrc/security/polkit/distinfo
diff -u pkgsrc/security/polkit/distinfo:1.23 pkgsrc/security/polkit/distinfo:1.24
--- pkgsrc/security/polkit/distinfo:1.23        Thu Jun 25 10:29:54 2026
+++ pkgsrc/security/polkit/distinfo     Sun Oct 18 12:17:59 2026
@@ -1,10 +1,5 @@
-$NetBSD: distinfo,v 1.23 2026/06/25 10:29:54 wiz Exp $
+$NetBSD: distinfo,v 1.24 2026/10/18 12:17:59 wiz Exp $
 
-BLAKE2s (polkit-127.tar.gz) = 42e8bb751fc99d41b4ab296e7eeed826d14be0b13709399f2821aa12302f279f
-SHA512 (polkit-127.tar.gz) = 54b315f2ca05e957e7b9aafda16c1cddcc2266d6018c77dbf4cfe73b7d5b1569e6e07570884b9c5ecc4bdb3a29966169006aa727b089019d959208f2b53067e6
-Size (polkit-127.tar.gz) = 472872 bytes
-SHA1 (patch-src_polkit_polkitunixprocess.c) = b95f8e5d7c1dd0ab9b084e3bd5b1fc6d05744b57
-SHA1 (patch-src_polkitagent_polkitagenthelper-pam.c) = 74e3a9d1b3f4c4e28a2353f4f824c83c0032b97d
-SHA1 (patch-src_polkitbackend_polkitbackendduktapeauthority.c) = 5e48729c3414ccd41faa2e60bf3c915207e21cd1
-SHA1 (patch-src_polkitbackend_polkitd.c) = e587e99017128477522050391c5410024a1e25c7
-SHA1 (patch-src_programs_pkttyagent.c) = d9044bcc2ebd79a885c7bbc8327bdebab5680748
+BLAKE2s (polkit-128.tar.gz) = 6ddab2e8aa3962302a995f8fd03ccc8de7f57a68fd5fc09468abff909933be4b
+SHA512 (polkit-128.tar.gz) = a5c38c7214da42ac6db0a00cec1cb3927d57163f5bd47b4e59700ad83e30ad3ff85563e27375d0603d3cf3351bd5da8634e1354885d01b7c693cda7b68483345
+Size (polkit-128.tar.gz) = 512196 bytes