Red Hat Security Advisory

RHSA-2019:3232

polkit security update

Released 2019-10-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) polkit-0.112-18.el7_6.2
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) polkit-devel-0.112-18.el7_6.2, polkit-docs-0.112-18.el7_6.2
Red Hat Enterprise Linux Server EUS (v. 7.6) polkit-0.112-18.el7_6.2, polkit-0.112-18.el7_6.2.ppc, polkit-devel-0.112-18.el7_6.2 +2
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) polkit-0.112-18.el7_6.2, polkit-devel-0.112-18.el7_6.2, polkit-docs-0.112-18.el7_6.2

TI-2018-14011 CVE-2018-19788 · GHSA-4569-2jp2-r7vf

HIGH 73

A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.11575 Published 2018-12-03 Partial fix CWE-20