Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2018-1

Опубликовано: 30 июл. 2019
Источник: suse-cvrf

Описание

Security update for polkit

This update for polkit fixes the following issues:

Security issue fixed:

  • CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend (bsc#1121826).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
polkit-devel-0.114-3.9.1
typelib-1_0-Polkit-1_0-0.114-3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
polkit-devel-0.114-3.9.1
typelib-1_0-Polkit-1_0-0.114-3.9.1

Ссылки

Описание

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP1:libpolkit0-0.114-3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP1:polkit-0.114-3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP1:polkit-devel-0.114-3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP1:typelib-1_0-Polkit-1_0-0.114-3.9.1
Ссылки