polkit-0.96-5.AXS4
エラータID: AXSA:2013-629:01
Release date:
Monday, September 23, 2013 - 19:01
Subject:
polkit-0.96-5.AXS4
Affected Channels:
Asianux Server 4 for x86_64
Asianux Server 4 for ppc
Asianux Server 4 for x86
Severity:
High
Description:
PolicyKit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security issues fixed with this release:
• CVE-2013-4288
No description available at the time of writing, please refer to the CVE link below.
Solution:
Update packages.
CVEs:
CVE-2013-4288
Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
Additional Info:
N/A
Download:
SRPMS
- polkit-0.96-5.AXS4.src.rpm
MD5: fd3dcdddf879cb0c2571213793df01b8
SHA-256: 63808345e9068a6d1751ba19e6567a293c78da3d9360a246cb459b101282c844
Size: 1.01 MB
Asianux Server 4 for x86
- polkit-0.96-5.AXS4.i686.rpm
MD5: 7890b57ccdb70639651779435ec6f6b9
SHA-256: 620cccc11e06a45a9b2fc8d71abafe176ff0e503d6073de6107950fecd744d66
Size: 157.00 kB - polkit-devel-0.96-5.AXS4.i686.rpm
MD5: a3c2e38000f5c5ee5eaf15abea214d12
SHA-256: aaca72f89b48a316fc3a0f2c0d2b6d56ec1800e9f9075cb789d127089f86e7bb
Size: 26.86 kB - polkit-docs-0.96-5.AXS4.i686.rpm
MD5: 0dd4f19e419fe7ee7dd050fce0191fc3
SHA-256: 63636bd555870a23b3f800fbd54235afe8a17a84ec9c2e215ff9789ce6d4df8f
Size: 272.03 kB - polkit-desktop-policy-0.96-5.AXS4.noarch.rpm
MD5: 6097e53cb461333aad1c3a920ee4d841
SHA-256: 86eef29c57b0501cbbb3eae98385475ce211be9f746612ca8d44193b5902278e
Size: 6.37 kB
Asianux Server 4 for x86_64
- polkit-0.96-5.AXS4.x86_64.rpm
MD5: 1f57a3a1845d668a5fc8ade46680ba70
SHA-256: 9fe4d9bd1caa79937d220fc90ff926459dff533185115df56b11a790a56acccf
Size: 157.13 kB - polkit-devel-0.96-5.AXS4.x86_64.rpm
MD5: 780faa79c0667be043be9c1004629007
SHA-256: 466a2d2d1b327b3260c817625dd44b00010cb3239a57cba32453099730d8864f
Size: 26.53 kB - polkit-docs-0.96-5.AXS4.x86_64.rpm
MD5: 229cec9052399f656662e5aac259338f
SHA-256: 2b2f0907638bbc513970469724d0799b0b2294ab9030db64891d46d402a1c4c5
Size: 271.60 kB - polkit-desktop-policy-0.96-5.AXS4.noarch.rpm
MD5: 22864040c887c715b32cc12f094b0bd3
SHA-256: 9610ae9bf6cc37f9a6f3b09d6ed2c12e771493323f81b7b5d3c25b2e5b528071
Size: 5.92 kB - polkit-0.96-5.AXS4.i686.rpm
MD5: 7890b57ccdb70639651779435ec6f6b9
SHA-256: 620cccc11e06a45a9b2fc8d71abafe176ff0e503d6073de6107950fecd744d66
Size: 157.00 kB - polkit-devel-0.96-5.AXS4.i686.rpm
MD5: a3c2e38000f5c5ee5eaf15abea214d12
SHA-256: aaca72f89b48a316fc3a0f2c0d2b6d56ec1800e9f9075cb789d127089f86e7bb
Size: 26.86 kB