polkit is a toolkit for defining and handling authorizations. It is
used for allowing unprivileged processes to speak to privileged
processes.
Update Information:
Security fix for CVE-2015-3218, CVE-2015-3255, CVE-2015-3256, CVE-2015-4625.
Please make sure to reboot or run (systemctl restart polkit.service) after applying this update.
* Tue Jul 14 2015 Miloslav TrmaÄ
[ 1 ] Bug #1228738 - CVE-2015-3218 polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent
https://bugzilla.redhat.com/show_bug.cgi?id=1228738
[ 2 ] Bug #1233808 - CVE-2015-4625 polkit: potential information disclosure vulnerability due to cookie counter wrapping
https://bugzilla.redhat.com/show_bug.cgi?id=1233808
This update can be installed with the "yum" update program. Use su -c 'yum update polkit' at the command line. For more information, refer to "Managing Software with yum", available at .
Get the latest Linux and open source security news straight to your inbox.