Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
98
security advisoryRed Hat Enterprise Linuximportant updateRedHat: RHSA-2019-2978 Important: Polkit Auth Hijacking Threat
An update for polkit is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: polkit security update Advisory ID: RHSA-2019:2978-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2978 Issue date: 2019-10-08 CVE Names: CVE-2019-6133 ==================================================================== 1. Summary: An update for polkit is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) - x86_64 Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) - noarch, x86_64 Red Hat Enterprise Linux Server EUS (v. 7.5) - noarch, ppc64, ppc64le, s390x, x86_64 3. Description: The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fix(es): * polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1664212 - CVE-2019-6133 polkit: Temporary auth hijacking via PID reuse and non-atomic fork 6. Package List: Red Hat Enterprise Linux ComputeNode EUS (v. 7.5): Source: polkit-0.112-14.el7_5.1.src.rpm x86_64: polkit-0.112-14.el7_5.1.i686.rpm polkit-0.112-14.el7_5.1.x86_64.rpm polkit-debuginfo-0.112-14.el7_5.1.i686.rpm polkit-debuginfo-0.112-14.el7_5.1.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5): noarch: polkit-docs-0.112-14.el7_5.1.noarch.rpm x86_64: polkit-debuginfo-0.112-14.el7_5.1.i686.rpm polkit-debuginfo-0.112-14.el7_5.1.x86_64.rpm polkit-devel-0.112-14.el7_5.1.i686.rpm polkit-devel-0.112-14.el7_5.1.x86_64.rpm Red Hat Enterprise Linux Server EUS (v. 7.5): Source: polkit-0.112-14.el7_5.1.src.rpm noarch: polkit-docs-0.112-14.el7_5.1.noarch.rpm ppc64: polkit-0.112-14.el7_5.1.ppc.rpm polkit-0.112-14.el7_5.1.ppc64.rpm polkit-debuginfo-0.112-14.el7_5.1.ppc.rpm polkit-debuginfo-0.112-14.el7_5.1.ppc64.rpm polkit-devel-0.112-14.el7_5.1.ppc.rpm polkit-devel-0.112-14.el7_5.1.ppc64.rpm ppc64le: polkit-0.112-14.el7_5.1.ppc64le.rpm polkit-debuginfo-0.112-14.el7_5.1.ppc64le.rpm polkit-devel-0.112-14.el7_5.1.ppc64le.rpm s390x: polkit-0.112-14.el7_5.1.s390.rpm polkit-0.112-14.el7_5.1.s390x.rpm polkit-debuginfo-0.112-14.el7_5.1.s390.rpm polkit-debuginfo-0.112-14.el7_5.1.s390x.rpm polkit-devel-0.112-14.el7_5.1.s390.rpm polkit-devel-0.112-14.el7_5.1.s390x.rpm x86_64: polkit-0.112-14.el7_5.1.i686.rpm polkit-0.112-14.el7_5.1.x86_64.rpm polkit-debuginfo-0.112-14.el7_5.1.i686.rpm polkit-debuginfo-0.112-14.el7_5.1.x86_64.rpm polkit-devel-0.112-14.el7_5.1.i686.rpm polkit-devel-0.112-14.el7_5.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2019-6133 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXZxesdzjgjWX9erEAQjCaA/7BDsSY8DiXFS1UaXFFsT7ja4soALuUFBD e08j1NtckbxIcZKHEys6kE+XdktQ2sQu6D+53aygTFmVEq12NYSgoFU37opKYTGL UcwUKMPCThE3wNl4rBjYdtotv6SDn0U7+31LFQVKi31jqqR7HYbUzxdUnJ/oy8uJ N62IFcCB8PYeHa7RPy7whUwMAwEW/DrFr+rjioMokjp1/LK3xaqCoU0hyVqQtRXn n/9xKkiJxXiRUDI5/ml1oLwMRHO1C5IZanykz4CXwXnx2bepSLePxgOJuN62MGHV 7ZYFRE8Byk5CqM+mM2PDCOBNWBJhxbyJmZDXn6kQQEoBiUGGJAXaZ1ocmZymNfxn pLd66IeehFsUR2v95yl89mOXOfFZpLY4IaxA4HkNLa9EA9913YXA9mnfaEE2x7Cx +U0wxm8YmhI6rJw4Lr+BPaRdrMwm8UQu0ItlJkJhNNKZWLqzJHAyof1kL0gMe0IZ ti6wyWFRCx2jDIQJI1oZ4ZMfmG4mHzNpuT06hicc/Mu4Hkdf4DcSRl/RHIqQW9SZ 1LnVzf8MlMNopRfb/wBUlKpuUDNUUbVEnVulgFA9sze5v6gQ7w/s8a09uv07lJcr OEfd1Kaial3CI5ot4/w5KzGg+8DGm+4Ot+bYidPTnkduL5pqhJwHim0yYBmlMrmc lu2LpoZDn5E=c3fn -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 08, 2019
•Important
Red Hat
98
security advisoryupdateimportantRed Hat Enterprise Linux 7.4: RHSA-2019-2699-01 Important: Auth Hijacking
An update for polkit is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: polkit security update Advisory ID: RHSA-2019:2699-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2699 Issue date: 2019-09-10 CVE Names: CVE-2019-6133 ==================================================================== 1. Summary: An update for polkit is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) - x86_64 Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) - noarch, x86_64 Red Hat Enterprise Linux Server EUS (v. 7.4) - noarch, ppc64, ppc64le, s390x, x86_64 3. Description: The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fix(es): * polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1664212 - CVE-2019-6133 polkit: Temporary auth hijacking via PID reuse and non-atomic fork 6. Package List: Red Hat Enterprise Linux ComputeNode EUS (v. 7.4): Source: polkit-0.112-12.el7_4.1.src.rpm x86_64: polkit-0.112-12.el7_4.1.i686.rpm polkit-0.112-12.el7_4.1.x86_64.rpm polkit-debuginfo-0.112-12.el7_4.1.i686.rpm polkit-debuginfo-0.112-12.el7_4.1.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4): noarch: polkit-docs-0.112-12.el7_4.1.noarch.rpm x86_64: polkit-debuginfo-0.112-12.el7_4.1.i686.rpm polkit-debuginfo-0.112-12.el7_4.1.x86_64.rpm polkit-devel-0.112-12.el7_4.1.i686.rpm polkit-devel-0.112-12.el7_4.1.x86_64.rpm Red Hat Enterprise Linux Server EUS (v. 7.4): Source: polkit-0.112-12.el7_4.1.src.rpm noarch: polkit-docs-0.112-12.el7_4.1.noarch.rpm ppc64: polkit-0.112-12.el7_4.1.ppc.rpm polkit-0.112-12.el7_4.1.ppc64.rpm polkit-debuginfo-0.112-12.el7_4.1.ppc.rpm polkit-debuginfo-0.112-12.el7_4.1.ppc64.rpm polkit-devel-0.112-12.el7_4.1.ppc.rpm polkit-devel-0.112-12.el7_4.1.ppc64.rpm ppc64le: polkit-0.112-12.el7_4.1.ppc64le.rpm polkit-debuginfo-0.112-12.el7_4.1.ppc64le.rpm polkit-devel-0.112-12.el7_4.1.ppc64le.rpm s390x: polkit-0.112-12.el7_4.1.s390.rpm polkit-0.112-12.el7_4.1.s390x.rpm polkit-debuginfo-0.112-12.el7_4.1.s390.rpm polkit-debuginfo-0.112-12.el7_4.1.s390x.rpm polkit-devel-0.112-12.el7_4.1.s390.rpm polkit-devel-0.112-12.el7_4.1.s390x.rpm x86_64: polkit-0.112-12.el7_4.1.i686.rpm polkit-0.112-12.el7_4.1.x86_64.rpm polkit-debuginfo-0.112-12.el7_4.1.i686.rpm polkit-debuginfo-0.112-12.el7_4.1.x86_64.rpm polkit-devel-0.112-12.el7_4.1.i686.rpm polkit-devel-0.112-12.el7_4.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2019-6133 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXXepcdzjgjWX9erEAQg7yA/9EovZrEtyMCBP7LRDpOKDLQ0wR4SfU4+d 4F0FC3dHUQiEzaw44P4E8NJJNra20p9aKqQApu/MXcutoo/qUmFiAH0YH6aSbB4U iOIUe0LxK74MjcP7vqi6XfLSKHMC3Ji4Wlbwd1gd7zEzgNuFEAEaBJ4Hs9PJfxxt Ns+KKSrpsIxvvUfjTwBo2vabK6tu9sdLW7xc4SdKxvyUZctdxpBs0NGbiS4gM0Zq AM4JdY/W9mVFt8B7QPHikx6lr/sjnL1z72TqxMgKHoD2wXjg//OXx3eJdUcj396A +Htwfkg3oOp6QvbYkegXxBSdKMBBcUYfBF8zUwHESPzDJm0uJ71E2q3SvJ4TM8jH BdAEqofo7j7WnbBTGHC6wMLSUgyHOMXx9XM8M6CJXcZQTsfxLxOaIu4zj3CHSiQt l6sb0UvgwqBJgWsX9RAvwy073bz4PERIduEciQwdTcULsNTt6GNUabkOg6j6kYqh 9Z0dTvKZzkoHOArqbAoFKUbCkPLpeDk4syqSzrUGas2LivT8j5p06uTWCI5SJxW/ TltOt2H9hMxHj8w0XCGNhWoQZmCnu+BlgtkRJjauAhFBlXIJ0Jtv9wpub5mcSatx usSoOYZ7gtcdFUzy17hJiqYQKkoqey5cwhVCycRxcTjAeI0kRElV1LLOv7Hkt4mV 8vuL6oBMkoY=jhxx -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 10, 2019
•Important
Red Hat
98
security advisorysecurity updateRed HatRedHat: RHSA-2019-0832-01 Important: Polkit Auth Hijacking Fix
An update for polkit is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: polkit security update Advisory ID: RHSA-2019:0832-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:0832 Issue date: 2019-04-23 CVE Names: CVE-2019-6133 ==================================================================== 1. Summary: An update for polkit is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 6.6) - noarch, x86_64 3. Description: The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fix(es): * polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1664212 - CVE-2019-6133 polkit: Temporary auth hijacking via PID reuse and non-atomic fork 6. PackageList: Red Hat Enterprise Linux Server AUS (v. 6.6): Source: polkit-0.96-7.el6_6.1.src.rpm noarch: polkit-desktop-policy-0.96-7.el6_6.1.noarch.rpm x86_64: polkit-0.96-7.el6_6.1.i686.rpm polkit-0.96-7.el6_6.1.x86_64.rpm polkit-debuginfo-0.96-7.el6_6.1.i686.rpm polkit-debuginfo-0.96-7.el6_6.1.x86_64.rpm polkit-devel-0.96-7.el6_6.1.i686.rpm polkit-devel-0.96-7.el6_6.1.x86_64.rpm polkit-docs-0.96-7.el6_6.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-6133 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXL8MmNzjgjWX9erEAQgbgBAAofMSGIRF9DcjazFQmOj49K2p1KJH2SAD cEGBJDkL6TG9nOFP7XN2oSc85JzgFgmSxMSZyhUcj/ZGDxCyM9Z8gZQWmUrhiysy kxbsDIPlgeg4+UhH1Xsqed98DVxq4RUFLskucCVJLUHSmz/xwhQ9ABdO7gnqftlX lwFkgmB4yOm1D/BIK04JKoVZ+j5/YQ//mNi4DIIEq+fS32rgecSf9mtQBLxg1J6i W3St/VDk3UUpx6sKeSRUinCRJ3zWDoENya8yooOnnd4aFV16qxZR14aC9BGA7Sih YmlSLZPA1Dy3GMNPXtS6R4OM0XarQlchSFv2Sibmg2ePBVEDXoTGEeb9N3s9rH10 xJdICOsZ1p7ZZbEa016XZxn193am/jxSdvItctb2m2BXGHVxsuG2rgZBoqxfcuQd LKP/x3Z1rpdOgcAq53SxF5wnzXsDdBtPiOQBdE9+bChbY2NXG2wUE/viXgVCv6NL RMtVRBsGFNojTbrpbwJEO2LTGbRshgMDkEJyHG7mzjsGjZRagvhnuxTFQYDknmUu zSGKPsJC5DTGoqsVmG+3alIBDMM8savGLvG/lxldYxOvCiCSPCKMnCGy4CFjO1b5 67bPJ96T5mmYi+r6LKLqieJ3ey+zLgZjmlPhalVl93zMKL8QXvZ+h47be1gtnLPE OgewN42MB/s=g92b -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Apr 23, 2019
•Important
Red Hat
200
security advisorysecurity fiximportant updateSciLinux: SLSA-2019-0420-1 Important Polkit Auth Hijacking Fix
polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133) SL6 x86_64 polkit-0.96-11.el6_10.1.i686.rpm polkit-0.96-11.el6_10.1.x86_64.rpm polkit-debuginfo-0.96-11.el6_10.1.i686.rpm polkit-debuginfo-0.96-11.el6_10.1.x86_64.rpm polkit-devel-0.96-11.el6_10.1.i686.rpm polkit-devel-0.96-11.el6_10.1.x86_64.rpm polkit-docs-0.96-11.el6_10.1.x86_64 [More...]. Synopsis: Important: polkit security update Advisory ID: SLSA-2019:0420-1 Issue Date: 2019-02-26 CVE Numbers: CVE-2019-6133 -- Security Fix(es): * polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133) -- SL6 x86_64 polkit-0.96-11.el6_10.1.i686.rpm polkit-0.96-11.el6_10.1.x86_64.rpm polkit-debuginfo-0.96-11.el6_10.1.i686.rpm polkit-debuginfo-0.96-11.el6_10.1.x86_64.rpm polkit-devel-0.96-11.el6_10.1.i686.rpm polkit-devel-0.96-11.el6_10.1.x86_64.rpm polkit-docs-0.96-11.el6_10.1.x86_64.rpm i386 polkit-0.96-11.el6_10.1.i686.rpm polkit-debuginfo-0.96-11.el6_10.1.i686.rpm polkit-devel-0.96-11.el6_10.1.i686.rpm polkit-docs-0.96-11.el6_10.1.i686.rpm noarch polkit-desktop-policy-0.96-11.el6_10.1.noarch.rpm - Scientific Linux Development Team . Critical patch released for polkit counters temporary authentication exploit. Refer to advisory for comprehensive information.. polkit, auth hijacking, scientific linux, security update. . Severity: Important. LinuxSecurity.com Team
Feb 26, 2019
•Important
Scientific Linux
98
security advisoryred hatimportantRed Hat Enterprise Linux 7: RHSA-2019-0230-01 Critical Auth Hijacking Alert
An update for polkit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: polkit security update Advisory ID: RHSA-2019:0230-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:0230 Issue date: 2019-01-31 CVE Names: CVE-2019-6133 ==================================================================== 1. Summary: An update for polkit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) - aarch64, noarch, ppc64le, s390x 3. Description: The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fix(es): * polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133) For more details about the security issue(s), includingthe impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank Jan Rybar (freedesktop.org) for reporting this issue. Upstream acknowledges Jann Horn (Google Project Zero) as the original reporter. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1664212 - CVE-2019-6133 polkit: Temporary auth hijacking via PID reuse and non-atomic fork 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: polkit-0.112-18.el7_6.1.src.rpm x86_64: polkit-0.112-18.el7_6.1.i686.rpm polkit-0.112-18.el7_6.1.x86_64.rpm polkit-debuginfo-0.112-18.el7_6.1.i686.rpm polkit-debuginfo-0.112-18.el7_6.1.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): noarch: polkit-docs-0.112-18.el7_6.1.noarch.rpm x86_64: polkit-debuginfo-0.112-18.el7_6.1.i686.rpm polkit-debuginfo-0.112-18.el7_6.1.x86_64.rpm polkit-devel-0.112-18.el7_6.1.i686.rpm polkit-devel-0.112-18.el7_6.1.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: polkit-0.112-18.el7_6.1.src.rpm x86_64: polkit-0.112-18.el7_6.1.i686.rpm polkit-0.112-18.el7_6.1.x86_64.rpm polkit-debuginfo-0.112-18.el7_6.1.i686.rpm polkit-debuginfo-0.112-18.el7_6.1.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): noarch: polkit-docs-0.112-18.el7_6.1.noarch.rpm x86_64: polkit-debuginfo-0.112-18.el7_6.1.i686.rpm polkit-debuginfo-0.112-18.el7_6.1.x86_64.rpm polkit-devel-0.112-18.el7_6.1.i686.rpm polkit-devel-0.112-18.el7_6.1.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: polkit-0.112-18.el7_6.1.src.rpm noarch: polkit-docs-0.112-18.el7_6.1.noarch.rpm ppc64: polkit-0.112-18.el7_6.1.ppc.rpm polkit-0.112-18.el7_6.1.ppc64.rpm polkit-debuginfo-0.112-18.el7_6.1.ppc.rpm polkit-debuginfo-0.112-18.el7_6.1.ppc64.rpm polkit-devel-0.112-18.el7_6.1.ppc.rpm polkit-devel-0.112-18.el7_6.1.ppc64.rpm ppc64le: polkit-0.112-18.el7_6.1.ppc64le.rpm polkit-debuginfo-0.112-18.el7_6.1.ppc64le.rpm polkit-devel-0.112-18.el7_6.1.ppc64le.rpm s390x: polkit-0.112-18.el7_6.1.s390.rpm polkit-0.112-18.el7_6.1.s390x.rpm polkit-debuginfo-0.112-18.el7_6.1.s390.rpm polkit-debuginfo-0.112-18.el7_6.1.s390x.rpm polkit-devel-0.112-18.el7_6.1.s390.rpm polkit-devel-0.112-18.el7_6.1.s390x.rpm x86_64: polkit-0.112-18.el7_6.1.i686.rpm polkit-0.112-18.el7_6.1.x86_64.rpm polkit-debuginfo-0.112-18.el7_6.1.i686.rpm polkit-debuginfo-0.112-18.el7_6.1.x86_64.rpm polkit-devel-0.112-18.el7_6.1.i686.rpm polkit-devel-0.112-18.el7_6.1.x86_64.rpm Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7): Source: polkit-0.112-18.el7_6.1.src.rpm aarch64: polkit-0.112-18.el7_6.1.aarch64.rpm polkit-debuginfo-0.112-18.el7_6.1.aarch64.rpm polkit-devel-0.112-18.el7_6.1.aarch64.rpm noarch: polkit-docs-0.112-18.el7_6.1.noarch.rpm ppc64le: polkit-0.112-18.el7_6.1.ppc64le.rpm polkit-debuginfo-0.112-18.el7_6.1.ppc64le.rpm polkit-devel-0.112-18.el7_6.1.ppc64le.rpm s390x: polkit-0.112-18.el7_6.1.s390.rpm polkit-0.112-18.el7_6.1.s390x.rpm polkit-debuginfo-0.112-18.el7_6.1.s390.rpm polkit-debuginfo-0.112-18.el7_6.1.s390x.rpm polkit-devel-0.112-18.el7_6.1.s390.rpm polkit-devel-0.112-18.el7_6.1.s390x.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: polkit-0.112-18.el7_6.1.src.rpm noarch: polkit-docs-0.112-18.el7_6.1.noarch.rpm x86_64: polkit-0.112-18.el7_6.1.i686.rpm polkit-0.112-18.el7_6.1.x86_64.rpm polkit-debuginfo-0.112-18.el7_6.1.i686.rpm polkit-debuginfo-0.112-18.el7_6.1.x86_64.rpm polkit-devel-0.112-18.el7_6.1.i686.rpm polkit-devel-0.112-18.el7_6.1.x86_64.rpm These packages are GPG signed by RedHat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-6133 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXFM8uNzjgjWX9erEAQgA6A//S/xsnhdH/Sgyh6WegaISe+H6vYlm7Kr4 5IEUU3oWHDIukva4D/+NIs4iXRohaqJ1e+SXIoZxx4cxSE57b6anfsl+p4Yz2HmB IZXdz65bFif3GuquPtddV/yiP7F8tFOm8+NvKzJCssFE3UM6D1DrZ0/b6GvLmmRQ TN0w/R0UbrlQWJnB3G58g8ROthRE+/JIert7tc3hFhHE4NcTktK9MkPvwbc2gGjx /6l/kszCHQyNZHnvB/Z1WNc8LPi84/mCRW5rpzmEq/E0Szcbb4B2I6zUsgbdqAwD xREBwAqyZKLgCcTCvf2nfuR1lD6IqGIuEniVqJ57OhsBI8n+5+abkk4skgVCrftP 0xiYq/ccnTfRXr4dyXeDXl4w1ODX2hsITdGLXTNix+Gg0d6XRBbG9oDNcKXqDlhU SvPY+I4jJou8XXaz3hm+lPRs4cio7MTMsUQrRVrJAzc7wFV6wvOMcGzTu5Zi5ATk 00XIBXt9QlvHW5KIOkDCfafMs+S6unzuK5k28k2cJKgwGeKxPyf+pbxJcnC1nR1N y4g9LsLfHk8knzxajDeoqY29VVMVclYyNBX+yUx70UT5m7Y0je8RM7Nhl1ONnsdg TZ1Nid3w1KIsLnB3QXdZHDQy+FcEsDXHu/RAgRify9nMpaYYmxJTF4S1XOOaAnes XJURZ7X+AZ8=ioOW -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 31, 2019
•Important
Red Hat
200
security advisorycriticalpolkitSciLinux SL7: SLSA-2019-0230-1 Critical: polkit Auth Hijacking
polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133) SL7 x86_64 polkit-0.112-18.el7_6.1.i686.rpm polkit-0.112-18.el7_6.1.x86_64.rpm polkit-debuginfo-0.112-18.el7_6.1.i686.rpm polkit-debuginfo-0.112-18.el7_6.1.x86_64.rpm polkit-devel-0.112-18.el7_6.1.i686.rpm polkit-devel-0.112-18.el7_6.1.x86_64.rpm noarch polkit-docs-0.112-18.el7_6 [More...]. Synopsis: Important: polkit security update Advisory ID: SLSA-2019:0230-1 Issue Date: 2019-01-31 CVE Numbers: CVE-2019-6133 -- Security Fix(es): * polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133) -- SL7 x86_64 polkit-0.112-18.el7_6.1.i686.rpm polkit-0.112-18.el7_6.1.x86_64.rpm polkit-debuginfo-0.112-18.el7_6.1.i686.rpm polkit-debuginfo-0.112-18.el7_6.1.x86_64.rpm polkit-devel-0.112-18.el7_6.1.i686.rpm polkit-devel-0.112-18.el7_6.1.x86_64.rpm noarch polkit-docs-0.112-18.el7_6.1.noarch.rpm - Scientific Linux Development Team . Critical polkit security patch for SL7 tackling PID reuse and non-atomic fork vulnerabilities, associated with advisory ID SLSA-2020:0456-2, now available.. polkit, temporary auth, hijacking, SL7, security advisory. . Severity: Critical. LinuxSecurity.com Team
Jan 31, 2019
•Critical
Scientific Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!