Red Hat Security Advisory

RHSA-2013:1282

rtkit security update

Released 2013-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) rtkit-0.5-2.el6_4
Red Hat Enterprise Linux HPC Node Optional (v. 6) rtkit-0.5-2.el6_4
Red Hat Enterprise Linux Server (v. 6) rtkit-0.5-2.el6_4
Red Hat Enterprise Linux Workstation (v. 6) rtkit-0.5-2.el6_4

Fixes 1 record

TI-2013-03790 CVE-2013-4326 · GHSA-63rr-v2vx-w3jw

RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit…

LOW 21

RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race cond…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00374 Published 2013-10-03 Fixed CWE-264