[SECURITY] [DLA-1448-1] policykit-1 security update

2018-07-2800:38:36

lists.debian.org

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

28.2%

JSON

Package : policykit-1
Version : 0.105-15~deb8u3
CVE ID : CVE-2018-1116
Debian Bug : #903563

It was discovered that there was a denial of service vulnerability in
policykit-1, a framework for managing administrative policies and
privileges.

For Debian 8 "Jessie", this issue has been fixed in policykit-1 version
0.105-15~deb8u3.

We recommend that you upgrade your policykit-1 packages.

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian8armellibpolkit-gobject-1-dev< 0.105-15~deb8u3libpolkit-gobject-1-dev_0.105-15~deb8u3_armel.deb
Debian8armhfgir1.2-polkit-1.0< 0.105-15~deb8u3gir1.2-polkit-1.0_0.105-15~deb8u3_armhf.deb
Debian8i386libpolkit-gobject-1-0< 0.105-15~deb8u3libpolkit-gobject-1-0_0.105-15~deb8u3_i386.deb
Debian8amd64libpolkit-gobject-1-dev< 0.105-15~deb8u3libpolkit-gobject-1-dev_0.105-15~deb8u3_amd64.deb
Debian8armhflibpolkit-agent-1-dev< 0.105-15~deb8u3libpolkit-agent-1-dev_0.105-15~deb8u3_armhf.deb
Debian8armhfpolicykit-1< 0.105-15~deb8u3policykit-1_0.105-15~deb8u3_armhf.deb
Debian8armhflibpolkit-gobject-1-dev< 0.105-15~deb8u3libpolkit-gobject-1-dev_0.105-15~deb8u3_armhf.deb
Debian8armellibpolkit-backend-1-dev< 0.105-15~deb8u3libpolkit-backend-1-dev_0.105-15~deb8u3_armel.deb
Debian8armellibpolkit-backend-1-0< 0.105-15~deb8u3libpolkit-backend-1-0_0.105-15~deb8u3_armel.deb
Debian8allpolicykit-1-doc< 0.105-15~deb8u3policykit-1-doc_0.105-15~deb8u3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	armel	libpolkit-gobject-1-dev	< 0.105-15~deb8u3	libpolkit-gobject-1-dev_0.105-15~deb8u3_armel.deb
Debian	8	armhf	gir1.2-polkit-1.0	< 0.105-15~deb8u3	gir1.2-polkit-1.0_0.105-15~deb8u3_armhf.deb
Debian	8	i386	libpolkit-gobject-1-0	< 0.105-15~deb8u3	libpolkit-gobject-1-0_0.105-15~deb8u3_i386.deb
Debian	8	amd64	libpolkit-gobject-1-dev	< 0.105-15~deb8u3	libpolkit-gobject-1-dev_0.105-15~deb8u3_amd64.deb
Debian	8	armhf	libpolkit-agent-1-dev	< 0.105-15~deb8u3	libpolkit-agent-1-dev_0.105-15~deb8u3_armhf.deb
Debian	8	armhf	policykit-1	< 0.105-15~deb8u3	policykit-1_0.105-15~deb8u3_armhf.deb
Debian	8	armhf	libpolkit-gobject-1-dev	< 0.105-15~deb8u3	libpolkit-gobject-1-dev_0.105-15~deb8u3_armhf.deb
Debian	8	armel	libpolkit-backend-1-dev	< 0.105-15~deb8u3	libpolkit-backend-1-dev_0.105-15~deb8u3_armel.deb
Debian	8	armel	libpolkit-backend-1-0	< 0.105-15~deb8u3	libpolkit-backend-1-0_0.105-15~deb8u3_armel.deb
Debian	8	all	policykit-1-doc	< 0.105-15~deb8u3	policykit-1-doc_0.105-15~deb8u3_all.deb