Comment 13 for bug 1899193

Cleaning up the integer overflows and filedescriptor leaks feels like a good idea; however I'm inclined to say there's one CVE (or perhaps one per software package, if it's truly scattered around correctly) for misplaced polkit checks -- does that sound correct?

Thanks