Security update for polkit SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0015-1 Final 1 1 2019-01-03T10:28:14Z current 2019-01-03T10:28:14Z 2019-01-03T10:28:14Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for polkit This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (bsc#1118277) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-Azure-BYOS-2019-15,Image SLES15-EC2-HVM-BYOS-2019-15,Image SLES15-GCE-BYOS-2019-15,Image SLES15-OCI-BYOS-2019-15,Image SLES15-SAP-Azure-2019-15,Image SLES15-SAP-Azure-BYOS-2019-15,Image SLES15-SAP-Azure-LI-BYOS-Production-2019-15,Image SLES15-SAP-Azure-VLI-BYOS-Production-2019-15,Image SLES15-SAP-EC2-HVM-2019-15,Image SLES15-SAP-EC2-HVM-BYOS-2019-15,Image SLES15-SAP-GCE-2019-15,Image SLES15-SAP-GCE-BYOS-2019-15,Image SLES15-SAP-OCI-BYOS-2019-15,Image SLES15-SP1-Azure-BYOS-2019-15,Image SLES15-SP1-Azure-HPC-BYOS-2019-15,Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM-2019-15,Image SLES15-SP1-CAP-Deployment-BYOS-GCE-2019-15,Image SLES15-SP1-EC2-HPC-HVM-BYOS-2019-15,Image SLES15-SP1-EC2-HVM-BYOS-2019-15,Image SLES15-SP1-GCE-BYOS-2019-15,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy-2019-15,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server-2019-15,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy-2019-15,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server-2019-15,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy-2019-15,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server-2019-15,Image SLES15-SP1-OCI-BYOS-2019-15,Image SLES15-SP1-SAP-Azure-2019-15,Image SLES15-SP1-SAP-Azure-BYOS-2019-15,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2019-15,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2019-15,Image SLES15-SP1-SAP-EC2-HVM-2019-15,Image SLES15-SP1-SAP-EC2-HVM-BYOS-2019-15,Image SLES15-SP1-SAP-GCE-2019-15,Image SLES15-SP1-SAP-GCE-BYOS-2019-15,Image SLES15-SP1-SAP-OCI-BYOS-2019-15,Image SLES15-SP1-SAPCAL-Azure-2019-15,Image SLES15-SP1-SAPCAL-EC2-HVM-2019-15,Image SLES15-SP1-SAPCAL-GCE-2019-15,SUSE-2019-15,SUSE-SLE-Module-Basesystem-15-2019-15,SUSE-SLE-Module-Development-Tools-OBS-15-2019-15 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190015-1/ Link for SUSE-SU-2019:0015-1 https://lists.suse.com/pipermail/sle-security-updates/2019-January/005013.html E-Mail link for SUSE-SU-2019:0015-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1118277 SUSE Bug 1118277 https://www.suse.com/security/cve/CVE-2018-19788/ SUSE CVE CVE-2018-19788 page Image SLES15-Azure-BYOS Image SLES15-EC2-HVM-BYOS Image SLES15-GCE-BYOS Image SLES15-OCI-BYOS Image SLES15-SAP-Azure Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE Image SLES15-SAP-GCE-BYOS Image SLES15-SAP-OCI-BYOS Image SLES15-SP1-Azure-BYOS Image SLES15-SP1-Azure-HPC-BYOS Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM Image SLES15-SP1-CAP-Deployment-BYOS-GCE Image SLES15-SP1-EC2-HPC-HVM-BYOS Image SLES15-SP1-EC2-HVM-BYOS Image SLES15-SP1-GCE-BYOS Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server Image SLES15-SP1-OCI-BYOS Image SLES15-SP1-SAP-Azure Image SLES15-SP1-SAP-Azure-BYOS Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAP-EC2-HVM Image SLES15-SP1-SAP-EC2-HVM-BYOS Image SLES15-SP1-SAP-GCE Image SLES15-SP1-SAP-GCE-BYOS Image SLES15-SP1-SAP-OCI-BYOS Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE SUSE Linux Enterprise Module for Basesystem 15 libpolkit0-0.114-3.6.1 polkit-0.114-3.6.1 libpolkit0-32bit-0.114-3.6.1 libpolkit0-64bit-0.114-3.6.1 polkit-devel-0.114-3.6.1 polkit-doc-0.114-3.6.1 typelib-1_0-Polkit-1_0-0.114-3.6.1 libpolkit0-0.114-3.6.1 as a component of Image SLES15-Azure-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-Azure-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-EC2-HVM-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-EC2-HVM-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-GCE-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-GCE-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-OCI-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-OCI-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-Azure polkit-0.114-3.6.1 as a component of Image SLES15-SAP-Azure libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-Azure-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SAP-Azure-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production polkit-0.114-3.6.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production polkit-0.114-3.6.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-EC2-HVM polkit-0.114-3.6.1 as a component of Image SLES15-SAP-EC2-HVM libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-GCE polkit-0.114-3.6.1 as a component of Image SLES15-SAP-GCE libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-GCE-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SAP-GCE-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SAP-OCI-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SAP-OCI-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-Azure-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-Azure-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-Azure-HPC-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-Azure-HPC-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM polkit-0.114-3.6.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-GCE polkit-0.114-3.6.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-GCE libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-EC2-HVM-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-EC2-HVM-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-GCE-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-GCE-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy polkit-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server polkit-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy polkit-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server polkit-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy polkit-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server polkit-0.114-3.6.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-OCI-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-OCI-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-Azure polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-Azure libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-Azure-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-Azure-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-EC2-HVM polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-EC2-HVM libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-GCE polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-GCE libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-GCE-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-GCE-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-OCI-BYOS polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAP-OCI-BYOS libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAPCAL-Azure polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAPCAL-Azure libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM libpolkit0-0.114-3.6.1 as a component of Image SLES15-SP1-SAPCAL-GCE polkit-0.114-3.6.1 as a component of Image SLES15-SP1-SAPCAL-GCE libpolkit0-0.114-3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 polkit-0.114-3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 polkit-devel-0.114-3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 typelib-1_0-Polkit-1_0-0.114-3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command. CVE-2018-19788 Image SLES15-Azure-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-Azure-BYOS:polkit-0.114-3.6.1 Image SLES15-EC2-HVM-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-EC2-HVM-BYOS:polkit-0.114-3.6.1 Image SLES15-GCE-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-GCE-BYOS:polkit-0.114-3.6.1 Image SLES15-OCI-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-OCI-BYOS:polkit-0.114-3.6.1 Image SLES15-SAP-Azure-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SAP-Azure-BYOS:polkit-0.114-3.6.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libpolkit0-0.114-3.6.1 Image SLES15-SAP-Azure-LI-BYOS-Production:polkit-0.114-3.6.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libpolkit0-0.114-3.6.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:polkit-0.114-3.6.1 Image SLES15-SAP-Azure:libpolkit0-0.114-3.6.1 Image SLES15-SAP-Azure:polkit-0.114-3.6.1 Image SLES15-SAP-EC2-HVM-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SAP-EC2-HVM-BYOS:polkit-0.114-3.6.1 Image SLES15-SAP-EC2-HVM:libpolkit0-0.114-3.6.1 Image SLES15-SAP-EC2-HVM:polkit-0.114-3.6.1 Image SLES15-SAP-GCE-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SAP-GCE-BYOS:polkit-0.114-3.6.1 Image SLES15-SAP-GCE:libpolkit0-0.114-3.6.1 Image SLES15-SAP-GCE:polkit-0.114-3.6.1 Image SLES15-SAP-OCI-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SAP-OCI-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-Azure-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-Azure-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-Azure-HPC-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-Azure-HPC-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM:libpolkit0-0.114-3.6.1 Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM:polkit-0.114-3.6.1 Image SLES15-SP1-CAP-Deployment-BYOS-GCE:libpolkit0-0.114-3.6.1 Image SLES15-SP1-CAP-Deployment-BYOS-GCE:polkit-0.114-3.6.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-EC2-HVM-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-EC2-HVM-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-GCE-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-GCE-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:libpolkit0-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:polkit-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:libpolkit0-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:polkit-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:libpolkit0-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:polkit-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:libpolkit0-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:polkit-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:libpolkit0-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:polkit-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:libpolkit0-0.114-3.6.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:polkit-0.114-3.6.1 Image SLES15-SP1-OCI-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-OCI-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-Azure-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-Azure-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-Azure:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-Azure:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-EC2-HVM:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-EC2-HVM:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-GCE-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-GCE-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-GCE:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-GCE:polkit-0.114-3.6.1 Image SLES15-SP1-SAP-OCI-BYOS:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAP-OCI-BYOS:polkit-0.114-3.6.1 Image SLES15-SP1-SAPCAL-Azure:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAPCAL-Azure:polkit-0.114-3.6.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAPCAL-EC2-HVM:polkit-0.114-3.6.1 Image SLES15-SP1-SAPCAL-GCE:libpolkit0-0.114-3.6.1 Image SLES15-SP1-SAPCAL-GCE:polkit-0.114-3.6.1 SUSE Linux Enterprise Module for Basesystem 15:libpolkit0-0.114-3.6.1 SUSE Linux Enterprise Module for Basesystem 15:polkit-0.114-3.6.1 SUSE Linux Enterprise Module for Basesystem 15:polkit-devel-0.114-3.6.1 SUSE Linux Enterprise Module for Basesystem 15:typelib-1_0-Polkit-1_0-0.114-3.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190015-1/ https://www.suse.com/security/cve/CVE-2018-19788.html CVE-2018-19788 https://bugzilla.suse.com/1118274 SUSE Bug 1118274 https://bugzilla.suse.com/1118277 SUSE Bug 1118277 https://bugzilla.suse.com/1119056 SUSE Bug 1119056 https://bugzilla.suse.com/1126909 SUSE Bug 1126909