Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-19788: A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command. 99999: CVE-2018-19788 polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | polkit | 0:0.112-22.amzn2.1 |
| Amazon Linux · 2 | polkit-debuginfo | 0:0.112-22.amzn2.1 |
| Amazon Linux · 2 | polkit-devel | 0:0.112-22.amzn2.1 |
| Amazon Linux · 2 | polkit-docs | 0:0.112-22.amzn2.1 |
Vulnerabilities 1
-
Unscored —
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully exe…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-19788.html