--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2017-6bdbf57f29
2017-05-15 12:48:25.123057
--------------------------------------------------------------------------------Name        : kf5-kauth
Product     : Fedora 24
Version     : 5.33.0
Release     : 2.fc24
URL         : Summary     : KDE Frameworks 5 Tier 2 integration module to perform actions as privileged user
Description :
KAuth is a framework to let applications perform actions as a privileged user.

--------------------------------------------------------------------------------Update Information:

security fix for CVE-2017-8422.
https://kde.org/info/security/advisory-20170510-1.txt
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1449652 - CVE-2017-8422 kf5-kauth: kauth: service invoking dbus is not properly checked and allows local privilege escalation [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1449652
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade kf5-kauth' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora 24: kf5-kauth Security Update

May 15, 2017
security fix for CVE-2017-8422

Summary

KAuth is a framework to let applications perform actions as a privileged user.

security fix for CVE-2017-8422.

https://kde.org/info/security/advisory-20170510-1.txt

[ 1 ] Bug #1449652 - CVE-2017-8422 kf5-kauth: kauth: service invoking dbus is not properly checked and allows local privilege escalation [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1449652

su -c 'dnf upgrade kf5-kauth' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

FEDORA-2017-6bdbf57f29 2017-05-15 12:48:25.123057 Product : Fedora 24 Version : 5.33.0 Release : 2.fc24 URL : Summary : KDE Frameworks 5 Tier 2 integration module to perform actions as privileged user Description : KAuth is a framework to let applications perform actions as a privileged user. security fix for CVE-2017-8422. https://kde.org/info/security/advisory-20170510-1.txt [ 1 ] Bug #1449652 - CVE-2017-8422 kf5-kauth: kauth: service invoking dbus is not properly checked and allows local privilege escalation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1449652 su -c 'dnf upgrade kf5-kauth' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
Product : Fedora 24
Version : 5.33.0
Release : 2.fc24
URL : Summary : KDE Frameworks 5 Tier 2 integration module to perform actions as privileged user

Related News

2.Motherboard Esm H320
2 - 3 min read
German software engineer Lennart Poettering recently presented run0 , a new tool in systemd v256 that aims to address the security concerns
22.Lock ScreenEffect Esm H320
2 - 3 min read
Red Hat recently released its newest enterprise Linux distro, Red Hat Enterprise Linux (RHEL) 9.4 , which introduces several features designed to
8.Locks HexConnections CodeGlobe Esm H320
1 - 2 min read
The latest release of Debian , one of the oldest and most trusted distributions within the Linux ecosystem, redefines security, stability, and
20.Lock AbstractDigital Circular Esm H320
1 - 2 min read
The Ubuntu security team has recently discovered and addressed multiple vulnerabilities in the Apache HTTP Server. The vulnerabilities affected
1.Penguin Landscape Esm H320
1 - 2 min read
A critical vulnerability was discovered in the Linux kernel's netfilter subsystem, specifically within the nf_tables component, posing potential
19.Laptop Bed Esm H320
2 - 3 min read
The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw that can enable attackers to execute arbitrary
23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved