RHSA-2026:59997 Red Hat Security Advisory: polkit security update

Bulletin has no description...

PT-2026-82587

openssl encrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...

polkit security update

An update is available for polkit. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The polkit packages provide a component for controlling system-wide privilege...

RLSA-2026:59997 Moderate: polkit security update

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fixes: polkit: Polkit: Denial of Service via unbounded input processing through standard...

polkit: Polkit: Denial of Service via unbounded input processing through standard input

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...

Moderate: Red Hat Security Advisory: polkit security update

An update for polkit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

polkit security update

125-4.0.1.el102.1 - Increase timeout to avoid defunct processes Orabug: 26930744 125-4.1 - NOTICE jrybar: the record 125-4 below was added in manually after Ymir's initial - commit 125-3.1. For some reason, 125-3.1 for rhel-10.2 was based on contents - of rhel-10.0 release instead of version 125-...

RockyLinux 10 : polkit (RLSA-2026:59997)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59997 advisory. polkit: Polkit: Denial of Service via unbounded input processing through standard input CVE-2026-4897 Tenable has extracted the preceding description block...

AlmaLinux 10 : polkit (ALSA-2026:59997)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59997 advisory. polkit: Polkit: Denial of Service via unbounded input processing through standard input CVE-2026-4897 Tenable has extracted the preceding description block...

Oracle Linux 10 : polkit (ELSA-2026-59997)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59997 advisory. 125-4.0.1.el102.1 - Increase timeout to avoid defunct processes Orabug: 26930744 125-4.1 - NOTICE jrybar: the record 125-4 below was added in manually after...

RHEL 10 : polkit (RHSA-2026:59997)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59997 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for...

ALSA-2026:59997 Moderate: polkit security update

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fixes: polkit: Polkit: Denial of Service via unbounded input processing through standard...

CVE-2026-75037

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037

LACT (Linux AppContainer Tool), a Linux-based application container management tool, is vulnerable to an authentication bypass through its Polkit authorization mechanism. The root cause lies in the reliance on UnixProcessSubject / Peer PID for Polkit authentication, which can be exploited locally...

CVE-2026-75037 Polkit authentication bypass in LACT

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

EUVD-2026-65390

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037 Polkit authentication bypass in LACT

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037 Polkit authentication bypass in LACT

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

SUSE CVE-2026-75037

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...