Red Hat Security AdvisoryRHSA-2019:2046
polkit security and bug fix update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) polkit-0.112-22.el7
- Red Hat Enterprise Linux Client Optional (v. 7) polkit-devel-0.112-22.el7, polkit-docs-0.112-22.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) polkit-0.112-22.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) polkit-devel-0.112-22.el7, polkit-docs-0.112-22.el7
- Red Hat Enterprise Linux Server (v. 7) polkit-0.112-22.el7, polkit-0.112-22.el7.ppc, polkit-devel-0.112-22.el7 +2
- Red Hat Enterprise Linux Workstation (v. 7) polkit-0.112-22.el7, polkit-devel-0.112-22.el7, polkit-docs-0.112-22.el7
Fixes 1 record
Priority HIGH 73
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.11575 · Published 2018-12-03 · Partial fix CWE-20
