Описание
Security update for polkit
This update for polkit fixes the following issue:
- CVE-2026-4897: Fixed possible OOM condition via specially crafted input to
polkit-agent-helper-1(bsc#1260859).
Список пакетов
Image SLES12-SP5-Azure-BYOS
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-Azure-HPC-BYOS
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-Azure-HPC-On-Demand
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-Azure-SAP-BYOS
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-Azure-SAP-On-Demand
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-Azure-Standard-On-Demand
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-EC2-BYOS
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-EC2-ECS-On-Demand
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-EC2-On-Demand
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-EC2-SAP-BYOS
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-EC2-SAP-On-Demand
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-GCE-BYOS
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-GCE-On-Demand
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-GCE-SAP-BYOS
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
Image SLES12-SP5-GCE-SAP-On-Demand
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libpolkit0-0.113-5.35.1
polkit-0.113-5.35.1
polkit-devel-0.113-5.35.1
typelib-1_0-Polkit-1_0-0.113-5.35.1
Ссылки
- Link for SUSE-SU-2026:1425-1
- E-Mail link for SUSE-SU-2026:1425-1
- SUSE Security Ratings
- SUSE Bug 1260859
- SUSE CVE CVE-2026-4897 page
Описание
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.
Затронутые продукты
Image SLES12-SP5-Azure-BYOS:libpolkit0-0.113-5.35.1
Image SLES12-SP5-Azure-BYOS:polkit-0.113-5.35.1
Image SLES12-SP5-Azure-HPC-BYOS:libpolkit0-0.113-5.35.1
Image SLES12-SP5-Azure-HPC-BYOS:polkit-0.113-5.35.1
Ссылки
- CVE-2026-4897
- SUSE Bug 1260859