Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::client | polkit | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::client | polkit-debuginfo | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::client | polkit-desktop-policy | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::client | polkit-devel | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::client | polkit-docs | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | polkit | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | polkit-debuginfo | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | polkit-desktop-policy | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | polkit-devel | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | polkit-docs | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::server | polkit | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::server | polkit-debuginfo | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::server | polkit-desktop-policy | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::server | polkit-devel | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::server | polkit-docs | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | polkit | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | polkit-debuginfo | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | polkit-desktop-policy | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | polkit-devel | 0:0.96-11.el6_10.1 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | polkit-docs | 0:0.96-11.el6_10.1 |
Vulnerabilities 1
-
Unscored —
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, an…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1664212
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0420.json
-
report
https://access.redhat.com/security/cve/CVE-2019-6133
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-6133
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-6133
-
article
https://bugs.chromium.org/p/project-zero/issues/detail?id=1692