Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2035-1

Опубликовано: 01 авг. 2019
Источник: suse-cvrf

Описание

Security update for polkit

This update for polkit fixes the following issues:

Security issue fixed:

  • CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend (bsc#1121826).

Список пакетов

HPE Helion OpenStack 8
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
Image SLES12-SP4-Azure-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-EC2-HVM-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-GCE-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-OCI-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-Azure
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-Azure-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-EC2-HVM
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-GCE
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-GCE-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP4-SAP-OCI-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-Azure-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-Azure-Basic-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-Azure-HPC-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-Azure-HPC-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-Azure-SAP-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-Azure-SAP-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-Azure-Standard-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-EC2-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-EC2-ECS-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-EC2-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-EC2-SAP-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-EC2-SAP-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-GCE-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-GCE-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-GCE-SAP-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-GCE-SAP-On-Demand
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-OCI-BYOS-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
SUSE Enterprise Storage 4
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Enterprise Storage 5
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Desktop 12 SP4
libpolkit0-0.113-5.18.1
libpolkit0-32bit-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server 12 SP1-LTSS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server 12 SP2-BCL
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server 12 SP2-LTSS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server 12 SP3-BCL
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server 12 SP3-LTSS
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server 12 SP4
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE Linux Enterprise Software Development Kit 12 SP4
polkit-devel-0.113-5.18.1
SUSE Linux Enterprise Workstation Extension 12 SP4
libpolkit0-32bit-0.113-5.18.1
SUSE OpenStack Cloud 7
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE OpenStack Cloud 8
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1
SUSE OpenStack Cloud Crowbar 8
libpolkit0-0.113-5.18.1
polkit-0.113-5.18.1
typelib-1_0-Polkit-1_0-0.113-5.18.1

Ссылки

Описание

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.

Затронутые продукты
HPE Helion OpenStack 8:libpolkit0-0.113-5.18.1
HPE Helion OpenStack 8:polkit-0.113-5.18.1
HPE Helion OpenStack 8:typelib-1_0-Polkit-1_0-0.113-5.18.1
Image SLES12-SP4-Azure-BYOS:libpolkit0-0.113-5.18.1
Ссылки