High ELSA-2019-0230 1 CVE

Important: polkit security update (Oracle Linux 7)

Published Feb 1, 2019 · Updated Feb 1, 2019

Ecosystem: Oracle Linux

Summary

[0.112-18.0.1]
- Increase timeout to avoid defunct processes [bug26930744]

[0.112-18.el7_6.1]
- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667311

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	polkit	0:0.112-18.0.1.el7_6.1
Oracle Linux · 7	polkit-devel	0:0.112-18.0.1.el7_6.1
Oracle Linux · 7	polkit-docs	0:0.112-18.0.1.el7_6.1

Vulnerabilities 1

Unscored —

CVE-2019-6133

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, an…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

Jan 11, 2019