Medium ELSA-2022-1546 1 CVE

Moderate: polkit security update (Oracle Linux 8)

Published Apr 27, 2022 · Updated Apr 27, 2022

Ecosystem: Oracle Linux

Summary

[0.115-13.0.1.el8_5.2]
- Increase timeout to avoid defunct processes [Orabug: 26930744]

[0.115-13.el8_5.2]
- necessary version bump due to build versioning
- Resolves: CVE-2021-4115

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	polkit	0:0.115-13.0.1.el8_5.2
Oracle Linux · 8	polkit-devel	0:0.115-13.0.1.el8_5.2
Oracle Linux · 8	polkit-docs	0:0.115-13.0.1.el8_5.2
Oracle Linux · 8	polkit-libs	0:0.115-13.0.1.el8_5.2

Vulnerabilities 1

Unscored —

CVE-2021-4115

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor…

policykit-1 policykit-1 Debian Ubuntu

Feb 21, 2022