polkit security update

0.115-11.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.115-11.1 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560...

SUSE SLES12 Security Update : polkit (SUSE-SU-2021:1842-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

Important Photon OS Security Update - PHSA-2021-3.0-0248

Updates of 'polkit', 'go' packages of Photon OS have been released...

Security update for polkit (important)

openSUSE Security Update: Security update for polkit Announcement ID: openSUSE-SU-2021:0838-1 Rating: important References: 1186497 Cross-References: CVE-2021-3560 CVSS scores: CVE-2021-3560 SUSE: 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An update tha...

RHEL 8 : polkit (RHSA-2021:2238)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2238 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

Photon OS 3.0: Polkit PHSA-2021-3.0-0248

An update of the polkit package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0248. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2021:1843-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

Important Photon OS Security Update - PHSA-2021-0248

Updates of 'polkit', 'go' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0350

Updates of 'polkit' packages of Photon OS have been released...

Oracle Linux 8 : polkit (ELSA-2021-2238)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2238 advisory. 0.115-11.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.115-11.1 - early disconnection from D-Bus results in privilege esc. - Resolves:...

SUSE SLES15 Security Update : polkit (SUSE-SU-2021:1844-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE-SU-2021:1844-1 Security update for polkit

This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497...

SUSE-SU-2021:1843-1 Security update for polkit

This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497...

SUSE-SU-2021:1842-1 Security update for polkit

This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497...

polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync()

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this...

Important: Red Hat Security Advisory: polkit security update

An update for polkit is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: polkit security update

An update for polkit is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync()

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this...

USN-4980-1: polkit vulnerability

Kevin Backhouse discovered that polkit incorrectly handled errors in the polkitsystembusnamegetcredssync function. A local attacker could possibly use this issue to escalate privileges...

Important: Red Hat Security Advisory: polkit security update

An update for polkit is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...