polkit-0.115-13.el8.2

The polkit packages provide a component for controlling system-wide privileges.
This component provides a uniform and organized way for non-privileged processes
to communicate with privileged ones.

Security Fix(es):

* polkit: file descriptor leak allows an unprivileged user to cause a crash
(CVE-2021-4115)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2021-4115
There is a flaw in polkit which can allow an unprivileged user to cause polkit
to crash, due to process file descriptor exhaustion. The highest threat from
this vulnerability is to availability. NOTE: Polkit process outage duration is
tied to the failing process being reaped and a new one being spawned