Red Hat Security AdvisoryRHSA-2013:1270
polkit security update
Released 2013-09-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) polkit-0.96-5.el6_4, polkit-desktop-policy-0.96-5.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) polkit-0.96-5.el6_4, polkit-devel-0.96-5.el6_4, polkit-docs-0.96-5.el6_4
- Red Hat Enterprise Linux HPC Node (v. 6) polkit-0.96-5.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) polkit-0.96-5.el6_4, polkit-desktop-policy-0.96-5.el6_4, polkit-devel-0.96-5.el6_4 +1
- Red Hat Enterprise Linux Server (v. 6) polkit-0.96-5.el6_4, polkit-0.96-5.el6_4.ppc, polkit-desktop-policy-0.96-5.el6_4 +3
- Red Hat Enterprise Linux Workstation (v. 6) polkit-0.96-5.el6_4, polkit-desktop-policy-0.96-5.el6_4, polkit-devel-0.96-5.el6_4 +1
Fixes 1 record
Priority LOW 32
Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1)…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00342 · Published 2013-10-03 · Fixed CWE-362
