Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | polkit | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | polkit-debuginfo | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | polkit-devel | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | polkit-docs | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | polkit | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | polkit-debuginfo | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | polkit-devel | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | polkit-docs | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | polkit | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | polkit-debuginfo | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | polkit-devel | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | polkit-docs | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | polkit | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | polkit-debuginfo | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | polkit-devel | 0:0.112-18.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | polkit-docs | 0:0.112-18.el7_6.1 |
Vulnerabilities 1
-
Unscored —
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, an…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1664212
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0230.json
-
report
https://access.redhat.com/security/cve/CVE-2019-6133
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-6133
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-6133
-
article
https://bugs.chromium.org/p/project-zero/issues/detail?id=1692