Synopsis

Important: polkit security update

Type/Severity

Security Advisory: Important

Topic

An update for polkit is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.

Security Fix(es):

• polkit: Temporary auth hijacking via PID reuse and non-atomic fork (CVE-2019-6133)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.6 x86_64

Fixes

• BZ - 1664212 - CVE-2019-6133 polkit: Temporary auth hijacking via PID reuse and non-atomic fork

CVEs

• CVE-2019-6133

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 6.6

SRPM
polkit-0.96-7.el6_6.1.src.rpm	SHA-256: 5c6a2598ea031a2af049000092733aa34c1e79214ba3f289a55ec85413dab081
x86_64
polkit-0.96-7.el6_6.1.i686.rpm	SHA-256: e55be82b9a8077d36be70f94023eb9a5b8f78eb6f96fdde1b277a70b4af741e0
polkit-0.96-7.el6_6.1.x86_64.rpm	SHA-256: 0130b375b424b1bb6af3a8c262700c4481d5d3b6d9c2153d90506b7fd990a0a2
polkit-debuginfo-0.96-7.el6_6.1.i686.rpm	SHA-256: 0e2d959048b385fa347c4faf68a8224738cdc4e87aa9d5ceda58d179f04396cd
polkit-debuginfo-0.96-7.el6_6.1.x86_64.rpm	SHA-256: 50e0c482da40bedc9ab6628f5b4214d63d9d7bb0eab0e7a3ff36733d6316359a
polkit-desktop-policy-0.96-7.el6_6.1.noarch.rpm	SHA-256: 3aded11276a4ba7018d582538afa3a967be234e7124ed611a89242de22a726c8
polkit-devel-0.96-7.el6_6.1.i686.rpm	SHA-256: cb007c2feeaa95820595de4e7c373b7ebad7115778eedb22e7a02180cc12d98a
polkit-devel-0.96-7.el6_6.1.x86_64.rpm	SHA-256: 6d527dbec30c90b3030b38a6f215669070f5b9f596364a370d00910173b10e99
polkit-docs-0.96-7.el6_6.1.x86_64.rpm	SHA-256: 9a908fdea3a6e8a306bfd29fef92dd73084731dbd4ba245bb285845face63462