Red Hat Security AdvisoryRHSA-2019:2978
polkit security update
Released 2019-10-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) polkit-0.112-14.el7_5.1
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) polkit-devel-0.112-14.el7_5.1, polkit-docs-0.112-14.el7_5.1
- Red Hat Enterprise Linux Server EUS (v. 7.5) polkit-0.112-14.el7_5.1, polkit-0.112-14.el7_5.1.ppc, polkit-devel-0.112-14.el7_5.1 +2
Fixes 1 record
Priority LOW 30
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached.
CVSS 3.0MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.00446 · Published 2019-01-11 · Partial fix CWE-362
