[AutoPR- Security] Patch polkit for CVE-2025-7519 [MEDIUM] (#14325)

Author: azurelinux-security

SPECS/polkit/CVE-2025-7519.patch

@@ -0,0 +1,31 @@
+From 56e9d27e620a0f60d7490ebf3fc2766b39209a1c Mon Sep 17 00:00:00 2001
+From: Azure Linux Security Servicing Account
+ <[email protected]>
+Date: Thu, 17 Jul 2025 06:41:24 +0000
+Subject: [PATCH] Fix CVE CVE-2025-7519 in polkit
+
+Upstream Patch Reference: https://github.com/polkit-org/polkit/commit/107d3801361b9f9084f78710178e683391f1d245.patch
+---
+ src/polkitbackend/polkitbackendactionpool.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+diff --git a/src/polkitbackend/polkitbackendactionpool.c b/src/polkitbackend/polkitbackendactionpool.c
+index 3894fe9..c9fa23e 100644
+--- a/src/polkitbackend/polkitbackendactionpool.c
++++ b/src/polkitbackend/polkitbackendactionpool.c
+@@ -672,6 +672,12 @@ _start (void *data, const char *el, const char **attr)
+   guint num_attr;
+   ParserData *pd = data;
+ 
++  if (pd->stack_depth < 0 || pd->stack_depth >= PARSER_MAX_DEPTH)
++    {
++      g_warning ("XML parsing reached max depth?");
++      goto error;
++    }
++
+   for (num_attr = 0; attr[num_attr] != NULL; num_attr++)
+     ;
+ 
+-- 
+2.45.3
+

SPECS/polkit/polkit.spec

@@ -1,12 +1,13 @@
 Summary:           A toolkit for defining and handling authorizations.
 Name:              polkit
 Version:           123
-Release:           2%{?dist}
+Release:           3%{?dist}
 Group:             Applications/System
 Vendor:            Microsoft Corporation
 License:           GPLv2+
 URL:               https://gitlab.freedesktop.org/polkit/polkit
 Source0:           https://gitlab.freedesktop.org/polkit/polkit/-/archive/%{version}/polkit-%{version}.tar.gz
+Patch0:            CVE-2025-7519.patch
 Distribution:   Azure Linux
 BuildRequires:     duktape-devel
 BuildRequires:     expat-devel
@@ -123,6 +124,9 @@ fi
 
 
 %changelog
+* Thu Jul 17 2025 Azure Linux Security Servicing Account <[email protected]> - 123-3
+- Patch for CVE-2025-7519
+
 * Thu Feb 01 2024 Dan Streetman <[email protected]> - 123-2
 - workaround "circular dependencies" from build tooling