Ubuntu 18.04/18.10/16.04: USN-3861-1 Critical PolicyKit Threat

ubuntu

January 16, 2019

PolicyKit could allow unintended access.

Summary

PolicyKit could allow unintended access.

Software Description:

- policykit-1: framework for managing administrative policies and privileges

Details:

It was discovered that PolicyKit incorrectly handled certain large user

UIDs. A local attacker with a large UID could possibly use this issue to

perform privileged actions.

Topics Covered

security advisory unauthorized access local exploit ubuntu policykit

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libpolkit-backend-1-0           0.105-21ubuntu0.3
  policykit-1                     0.105-21ubuntu0.3

Ubuntu 18.04 LTS:
  libpolkit-backend-1-0           0.105-20ubuntu0.18.04.4
  policykit-1                     0.105-20ubuntu0.18.04.4

Ubuntu 16.04 LTS:
  libpolkit-backend-1-0           0.105-14.1ubuntu0.4
  policykit-1                     0.105-14.1ubuntu0.4

Ubuntu 14.04 LTS:
  libpolkit-backend-1-0           0.105-4ubuntu3.14.04.5
  policykit-1                     0.105-4ubuntu3.14.04.5

After a standard system update you need to reboot your computer to make
all the necessary changes.