Format: 1.8 Date: Tue, 15 Jan 2019 08:15:13 -0500 Source: policykit-1 Binary: policykit-1 policykit-1-doc libpolkit-gobject-1-0 libpolkit-gobject-1-dev libpolkit-agent-1-0 libpolkit-agent-1-dev libpolkit-backend-1-0 libpolkit-backend-1-dev gir1.2-polkit-1.0 Architecture: amd64 all amd64_translations Version: 0.105-21ubuntu0.3 Distribution: cosmic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gir1.2-polkit-1.0 - GObject introspection data for PolicyKit libpolkit-agent-1-0 - PolicyKit Authentication Agent API libpolkit-agent-1-dev - PolicyKit Authentication Agent API - development files libpolkit-backend-1-0 - PolicyKit backend API libpolkit-backend-1-dev - PolicyKit backend API - development files libpolkit-gobject-1-0 - PolicyKit Authorization API libpolkit-gobject-1-dev - PolicyKit Authorization API - development files policykit-1 - framework for managing administrative policies and privileges policykit-1-doc - documentation for PolicyKit-1 Changes: policykit-1 (0.105-21ubuntu0.3) cosmic-security; urgency=medium . * SECURITY UPDATE: authorization bypass with large uid - debian/patches/CVE-2018-19788-1.patch: allow negative uids/gids in PolkitUnixUser and Group objects in src/polkit/polkitunixgroup.c, src/polkit/polkitunixprocess.c, src/polkit/polkitunixuser.c. - debian/patches/CVE-2018-19788-2.patch: add tests to test/data/etc/group, test/data/etc/passwd, test/data/etc/polkit-1/localauthority/10-test/com.example.pkla, test/polkitbackend/polkitbackendlocalauthoritytest.c. - debian/patches/CVE-2018-19788-3.patch: allow uid of -1 for a PolkitUnixProcess in src/polkit/polkitunixprocess.c. - CVE-2018-19788 Checksums-Sha1: 6f81ec7c4283767c70905d75baa9794a8d984aeb 7340 gir1.2-polkit-1.0_0.105-21ubuntu0.3_amd64.deb 5b124ac2f0c5ed5dff22d7909cef5727e7460f91 50196 libpolkit-agent-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb d2389e34818abd5a45f1544b5f690efb6afdfc35 15064 libpolkit-agent-1-0_0.105-21ubuntu0.3_amd64.deb ad7488a21d1bfd31d0b6decb14f7416b6b7d6f39 21292 libpolkit-agent-1-dev_0.105-21ubuntu0.3_amd64.deb b403a295055505861722a10f7eb4d745cae32986 138148 libpolkit-backend-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb 0ca33a52e1a1117cfb6baf0c97e32ba2d6e6eaa0 36620 libpolkit-backend-1-0_0.105-21ubuntu0.3_amd64.deb b12ae9e43f9cae60e62c5393b3216f5443597029 42400 libpolkit-backend-1-dev_0.105-21ubuntu0.3_amd64.deb ca954d7858562231ead2a6fe3ddc576791b45f79 149376 libpolkit-gobject-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb f9423fc308ac01cbd1bd51c5652d12ea6dd2f001 37292 libpolkit-gobject-1-0_0.105-21ubuntu0.3_amd64.deb f4110d3fecc37a308b0ae967f2fb6797ce5900d5 54660 libpolkit-gobject-1-dev_0.105-21ubuntu0.3_amd64.deb 961079dd686cce3728885e8dc4ea6983fd6baf75 91996 policykit-1-dbgsym_0.105-21ubuntu0.3_amd64.ddeb 494c838e6c0264bc0bb85e944b96c846f1fac9c4 253364 policykit-1-doc_0.105-21ubuntu0.3_all.deb d8fe19796e111ced4e5c6a8a17f21344bdea0ddb 12277 policykit-1_0.105-21ubuntu0.3_amd64.buildinfo b9bf3a34102a030b773e7dffcff1e50c826a24da 53636 policykit-1_0.105-21ubuntu0.3_amd64.deb efe9151b68a9bbfc9b5d1ed5a898a6457189ee3a 1813 policykit-1_0.105-21ubuntu0.3_amd64_translations.tar.gz Checksums-Sha256: d4590290e01bb5af286cb1f5818a788df393a0214e99ffe689c59bc8896fa7d4 7340 gir1.2-polkit-1.0_0.105-21ubuntu0.3_amd64.deb fdd02003123ce7bdfdac1034575ea8612f489898320ba22d24917a5fb71e8cd8 50196 libpolkit-agent-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb 4144f94196f4ca7bf8d7d33e8985dc81623b13387d84d252fb1a373254a62bca 15064 libpolkit-agent-1-0_0.105-21ubuntu0.3_amd64.deb be575d0ef0bf4ffbb27d1568926f27877414d5e9f68f9aef88efaa2a0c3be19e 21292 libpolkit-agent-1-dev_0.105-21ubuntu0.3_amd64.deb 606d729948062003d0d1f7121e8488ea341637d5d72ba07d2c504d02adb976e3 138148 libpolkit-backend-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb 5628d835302667ab9a4ae2be0e657444e397282a27a9bb3070bf065736e7ce2c 36620 libpolkit-backend-1-0_0.105-21ubuntu0.3_amd64.deb e4f55516e5917f411ae23be0912e9336e9305121e9a2b83f2d01c8b5830f7b33 42400 libpolkit-backend-1-dev_0.105-21ubuntu0.3_amd64.deb 5f8d0c1195302465b784190d0a62eb69d1e52bd7db5f65fb3ef4b5eda82cb99d 149376 libpolkit-gobject-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb 40dc6b900436f106dd27f468071fbc265f5a2654274981f28e17d3b0e12c9389 37292 libpolkit-gobject-1-0_0.105-21ubuntu0.3_amd64.deb bcf0f19b583c97fe220fa57fafddc67767269176df51b0754f506b152b96b2cb 54660 libpolkit-gobject-1-dev_0.105-21ubuntu0.3_amd64.deb 94d6bb5e3e5c02c8417911da88d2666157a9fc0e9cb4020111a89f24f062fea2 91996 policykit-1-dbgsym_0.105-21ubuntu0.3_amd64.ddeb 86169faa8001dd6de99033dd9e104762e66087502493b6f417d875b333f8f68b 253364 policykit-1-doc_0.105-21ubuntu0.3_all.deb 5df8fd72bac88ebefb4cdc8f06af902a416cb53422a213acccfd6593f4f9447e 12277 policykit-1_0.105-21ubuntu0.3_amd64.buildinfo 56f74f8d2e04b3fa3e7e68dc704c9d4320fdf8b78bfb5c5599d023b8d5f85991 53636 policykit-1_0.105-21ubuntu0.3_amd64.deb 0e9d05d73791d8149db0b0cfb9538ecb691245d9f50bbf6a73b3ae19e9b82f2d 1813 policykit-1_0.105-21ubuntu0.3_amd64_translations.tar.gz Files: 9324780a32a9f256891e15df549e80fe 7340 introspection optional gir1.2-polkit-1.0_0.105-21ubuntu0.3_amd64.deb 052731a606bef84be70ebdede3ef5f19 50196 debug optional libpolkit-agent-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb c81aa7cbd17b35864b836cc4f913ead5 15064 libs optional libpolkit-agent-1-0_0.105-21ubuntu0.3_amd64.deb 7d6fda35f4974d146c8a74cc2982b3a3 21292 libdevel optional libpolkit-agent-1-dev_0.105-21ubuntu0.3_amd64.deb 2add6dd741f16cd8d60650f73705dc43 138148 debug optional libpolkit-backend-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb bd544d10e39f904c57edb60b6980a80e 36620 libs optional libpolkit-backend-1-0_0.105-21ubuntu0.3_amd64.deb e4e238bc61ca843f9cfac49afbf7cc45 42400 libdevel optional libpolkit-backend-1-dev_0.105-21ubuntu0.3_amd64.deb 1287af7e2ae75d688d74ef7b905783fd 149376 debug optional libpolkit-gobject-1-0-dbgsym_0.105-21ubuntu0.3_amd64.ddeb 0526208728291aba4a20d499bd81304c 37292 libs optional libpolkit-gobject-1-0_0.105-21ubuntu0.3_amd64.deb a1362730ded756dc7b5bd7104d3099d3 54660 libdevel optional libpolkit-gobject-1-dev_0.105-21ubuntu0.3_amd64.deb 7bbb7d33c9ec4bf10a0602f44a68fd73 91996 debug optional policykit-1-dbgsym_0.105-21ubuntu0.3_amd64.ddeb ad9829eaf621ff9951be4b2a6fede565 253364 doc optional policykit-1-doc_0.105-21ubuntu0.3_all.deb 35ae8e582b297002b49815577b8f3ebf 12277 admin optional policykit-1_0.105-21ubuntu0.3_amd64.buildinfo bd2410e8ff97a8fbc79f37ddc794884c 53636 admin optional policykit-1_0.105-21ubuntu0.3_amd64.deb e7ccc7f95ea5022108b3f44bcca88980 1813 raw-translations - policykit-1_0.105-21ubuntu0.3_amd64_translations.tar.gz Original-Maintainer: Utopia Maintenance Team