ELSA-2019-2046

ELSA-2019-2046 - polkit security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2019-08-13

Description

[0.112-22.0.1]
- Increase timeout to avoid defunct processes [Orabug: 26930744]

[0.112-22]
- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512

[0.112-21]
- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377

[0.112-20]
- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312

[0.112-19]
- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377

Related CVEs

CVE-2018-19788

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	polkit-0.112-22.0.1.el7.src.rpm	6e5ad5a86c6db5c3449aa1bf224fe7d5	ELSA-2020-1135
	polkit-0.112-22.0.1.el7.aarch64.rpm	d346889300f035d8d9659f80d72645f2	ELSA-2020-1135
	polkit-devel-0.112-22.0.1.el7.aarch64.rpm	4d62236181c763ea1b0ea39c02b3491f	ELSA-2020-1135
	polkit-docs-0.112-22.0.1.el7.noarch.rpm	53f57600efbaa517bcfb62e509134731	ELSA-2020-1135
Oracle Linux 7 (x86_64)	polkit-0.112-22.0.1.el7.src.rpm	6e5ad5a86c6db5c3449aa1bf224fe7d5	ELSA-2020-1135
	polkit-0.112-22.0.1.el7.i686.rpm	42a34d55f6905aef50997b9cdc6b8868	ELSA-2020-1135
	polkit-0.112-22.0.1.el7.x86_64.rpm	58d8076cc743f189e018643bdfb472de	ELSA-2020-1135
	polkit-devel-0.112-22.0.1.el7.i686.rpm	c5c214add50ed6f0c95574a8e104a1b6	ELSA-2020-1135
	polkit-devel-0.112-22.0.1.el7.x86_64.rpm	7f3244db67a4fc3ca0439a21cb770d28	ELSA-2020-1135
	polkit-docs-0.112-22.0.1.el7.noarch.rpm	53f57600efbaa517bcfb62e509134731	ELSA-2020-1135

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team