Red Hat Security AdvisoryRHSA-2014:1359
polkit-qt security update
Released 2014-10-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) polkit-qt-0.103.0-10.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) polkit-qt-devel-0.103.0-10.el7_0, polkit-qt-doc-0.103.0-10.el7_0
- Red Hat Enterprise Linux ComputeNode (v. 7) polkit-qt-0.103.0-10.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) polkit-qt-devel-0.103.0-10.el7_0, polkit-qt-doc-0.103.0-10.el7_0
- Red Hat Enterprise Linux Server (v. 7) polkit-qt-0.103.0-10.el7_0
- Red Hat Enterprise Linux Server Optional (v. 7) polkit-qt-0.103.0-10.el7_0, polkit-qt-0.103.0-10.el7_0.ppc, polkit-qt-devel-0.103.0-10.el7_0 +2
- Red Hat Enterprise Linux Workstation (v. 7) polkit-qt-0.103.0-10.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 7) polkit-qt-devel-0.103.0-10.el7_0, polkit-qt-doc-0.103.0-10.el7_0
Fixes 1 record
Priority LOW 30
KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess Polkit…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00359 · Published 2014-08-19 · Fixed CWE-362