Synopsis: Important: polkit security update
Issue date: 2011-04-19
CVE Names: CVE-2011-1485
A race condition flaw was found in the PolicyKit pkexec utility and
polkitd daemon. A local user could use this flaw to appear as a
privileged user to pkexec, allowing them to execute arbitrary commands
as root by running those commands with pkexec. (CVE-2011-1485)
The system must be rebooted for this update to take effect.
SL 6.x
SRPMS:
polkit-0.96-2.el6_0.1.src.rpm
i386:
polkit-0.96-2.el6_0.1.i686.rpm
polkit-desktop-policy-0.96-2.el6_0.1.noarch.rpm
polkit-devel-0.96-2.el6_0.1.i686.rpm
polkit-docs-0.96-2.el6_0.1.i686.rpm
x86_64:
polkit-0.96-2.el6_0.1.i686.rpm
polkit-0.96-2.el6_0.1.x86_64.rpm
polkit-desktop-policy-0.96-2.el6_0.1.noarch.rpm
polkit-devel-0.96-2.el6_0.1.i686.rpm
polkit-devel-0.96-2.el6_0.1.x86_64.rpm
polkit-docs-0.96-2.el6_0.1.x86_64.rpm
- Scientific Linux Development Team