Red Hat Security AdvisoryRHSA-2018:1224
PackageKit security update
Released 2018-04-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-command-not-found-1.1.5-2.el7_5, PackageKit-glib-1.1.5-2.el7_5 +3
- Red Hat Enterprise Linux Client Optional (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-cron-1.1.5-2.el7_5, PackageKit-glib-devel-1.1.5-2.el7_5 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-glib-1.1.5-2.el7_5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-command-not-found-1.1.5-2.el7_5, PackageKit-cron-1.1.5-2.el7_5 +5
- Red Hat Enterprise Linux Server (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-command-not-found-1.1.5-2.el7_5, PackageKit-glib-1.1.5-2.el7_5 +5
- Red Hat Enterprise Linux Server Optional (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-1.1.5-2.el7_5.ppc, PackageKit-cron-1.1.5-2.el7_5 +3
- Red Hat Enterprise Linux Workstation (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-command-not-found-1.1.5-2.el7_5, PackageKit-glib-1.1.5-2.el7_5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-cron-1.1.5-2.el7_5, PackageKit-glib-devel-1.1.5-2.el7_5 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-command-not-found-1.1.5-2.el7_5, PackageKit-glib-1.1.5-2.el7_5 +3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) PackageKit-1.1.5-2.el7_5, PackageKit-cron-1.1.5-2.el7_5, PackageKit-glib-devel-1.1.5-2.el7_5 +1
Fixes 1 record
Priority LOW 25
An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00379 · Published 2018-04-23 · Fixed in 1.1.10 CWE-287
