Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2018-1

Опубликовано: 30 июл. 2019
Источник: suse-cvrf

Описание

Security update for polkit

This update for polkit fixes the following issues:

Security issue fixed:

  • CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend (bsc#1121826).

Список пакетов

Image SLES15-Azure-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-EC2-HVM-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-GCE-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-OCI-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-Azure
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-Azure-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-Azure-LI-BYOS-Production
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-Azure-VLI-BYOS-Production
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-EC2-HVM
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-EC2-HVM-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-GCE
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-GCE-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SAP-OCI-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-Azure-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-Azure-HPC-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-CAP-Deployment-BYOS-GCE
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-EC2-HPC-HVM-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-EC2-HVM-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-GCE-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-OCI-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-Azure
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-Azure-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-EC2-HVM
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-EC2-HVM-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-GCE
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-GCE-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAP-OCI-BYOS
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAPCAL-Azure
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAPCAL-EC2-HVM
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
Image SLES15-SP1-SAPCAL-GCE
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
SUSE Linux Enterprise Module for Basesystem 15
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
polkit-devel-0.114-3.9.1
typelib-1_0-Polkit-1_0-0.114-3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
libpolkit0-0.114-3.9.1
polkit-0.114-3.9.1
polkit-devel-0.114-3.9.1
typelib-1_0-Polkit-1_0-0.114-3.9.1

Ссылки

Описание

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.

Затронутые продукты
Image SLES15-Azure-BYOS:libpolkit0-0.114-3.9.1
Image SLES15-Azure-BYOS:polkit-0.114-3.9.1
Image SLES15-EC2-HVM-BYOS:libpolkit0-0.114-3.9.1
Image SLES15-EC2-HVM-BYOS:polkit-0.114-3.9.1
Ссылки
Уязвимость SUSE-SU-2019:2018-1