polkit security update

CentOS Errata and Security Advisory CESA-2016:0189

PolicyKit is a toolkit for defining and handling authorizations.

A denial of service flaw was found in how polkit handled authorization
requests. A local, unprivileged user could send malicious requests to
polkit, which could then cause the polkit daemon to corrupt its memory and
crash. (CVE-2015-3256)

All polkit users should upgrade to these updated packages, which contain a
backported patch to correct this issue. The system must be rebooted for
this update to take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2016-February/083837.html

Affected packages:
polkit
polkit-devel
polkit-docs

Upstream details at:
https://access.redhat.com/errata/RHSA-2016:0189