Red Hat Security Advisory

RHSA-2019:0832

polkit security update

Released 2019-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 6.6) polkit-0.96-7.el6_6.1, polkit-desktop-policy-0.96-7.el6_6.1, polkit-devel-0.96-7.el6_6.1 +1

Fixes 1 record

TI-2019-04343 CVE-2019-6133 · GHSA-7j6c-jrh9-mvqm

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed…

LOW 30

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached.

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00446 Published 2019-01-11 Partial fix CWE-362