Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1914-1

Опубликовано: 15 авг. 2019
Источник: suse-cvrf

Описание

Security update for polkit

This update for polkit fixes the following issues:

Security issue fixed:

  • CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass uid checking in the interactive backend (bsc#1121826).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
libpolkit0-0.114-lp151.5.3.1
libpolkit0-32bit-0.114-lp151.5.3.1
polkit-0.114-lp151.5.3.1
polkit-devel-0.114-lp151.5.3.1
polkit-doc-0.114-lp151.5.3.1
typelib-1_0-Polkit-1_0-0.114-lp151.5.3.1
openSUSE Leap 15.1
libpolkit0-0.114-lp151.5.3.1
libpolkit0-32bit-0.114-lp151.5.3.1
polkit-0.114-lp151.5.3.1
polkit-devel-0.114-lp151.5.3.1
polkit-doc-0.114-lp151.5.3.1
typelib-1_0-Polkit-1_0-0.114-lp151.5.3.1

Ссылки

Описание

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.

Затронутые продукты
openSUSE Leap 15.0:libpolkit0-0.114-lp151.5.3.1
openSUSE Leap 15.0:libpolkit0-32bit-0.114-lp151.5.3.1
openSUSE Leap 15.0:polkit-0.114-lp151.5.3.1
openSUSE Leap 15.0:polkit-devel-0.114-lp151.5.3.1
Ссылки