Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1116: A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure. 1595404: CVE-2018-1116 polkit: Improper authorization in polkit_backend_interactive_authority_check_authorization function in polkitd
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | polkit | 0:0.112-26.amzn2 |
| Amazon Linux · 2 | polkit-debuginfo | 0:0.112-26.amzn2 |
| Amazon Linux · 2 | polkit-devel | 0:0.112-26.amzn2 |
| Amazon Linux · 2 | polkit-docs | 0:0.112-26.amzn2 |
Vulnerabilities 1
-
Medium 4.7
A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_a…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-1116.html