Red Hat Security AdvisoryRHSA-2011:0455
polkit security update
Released 2011-04-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) polkit-0.96-2.el6_0.1, polkit-desktop-policy-0.96-2.el6_0.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) polkit-0.96-2.el6_0.1, polkit-devel-0.96-2.el6_0.1, polkit-docs-0.96-2.el6_0.1
- Red Hat Enterprise Linux HPC Node (v. 6) polkit-0.96-2.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) polkit-0.96-2.el6_0.1, polkit-desktop-policy-0.96-2.el6_0.1, polkit-devel-0.96-2.el6_0.1 +1
- Red Hat Enterprise Linux Server (v. 6) polkit-0.96-2.el6_0.1, polkit-0.96-2.el6_0.1.ppc, polkit-desktop-policy-0.96-2.el6_0.1 +3
- Red Hat Enterprise Linux Workstation (v. 6) polkit-0.96-2.el6_0.1, polkit-desktop-policy-0.96-2.el6_0.1, polkit-devel-0.96-2.el6_0.1 +1
Fixes 1 record
Priority LOW 39
Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.05246 · Published 2011-05-31 · Fixed CWE-362
