Format: 1.8 Date: Tue, 15 Jan 2019 08:18:22 -0500 Source: policykit-1 Binary: policykit-1 policykit-1-doc libpolkit-gobject-1-0 libpolkit-gobject-1-dev libpolkit-agent-1-0 libpolkit-agent-1-dev libpolkit-backend-1-0 libpolkit-backend-1-dev gir1.2-polkit-1.0 Architecture: amd64 all amd64_translations Version: 0.105-20ubuntu0.18.04.4 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gir1.2-polkit-1.0 - GObject introspection data for PolicyKit libpolkit-agent-1-0 - PolicyKit Authentication Agent API libpolkit-agent-1-dev - PolicyKit Authentication Agent API - development files libpolkit-backend-1-0 - PolicyKit backend API libpolkit-backend-1-dev - PolicyKit backend API - development files libpolkit-gobject-1-0 - PolicyKit Authorization API libpolkit-gobject-1-dev - PolicyKit Authorization API - development files policykit-1 - framework for managing administrative policies and privileges policykit-1-doc - documentation for PolicyKit-1 Changes: policykit-1 (0.105-20ubuntu0.18.04.4) bionic-security; urgency=medium . * SECURITY UPDATE: authorization bypass with large uid - debian/patches/CVE-2018-19788-1.patch: allow negative uids/gids in PolkitUnixUser and Group objects in src/polkit/polkitunixgroup.c, src/polkit/polkitunixprocess.c, src/polkit/polkitunixuser.c. - debian/patches/CVE-2018-19788-2.patch: add tests to test/data/etc/group, test/data/etc/passwd, test/data/etc/polkit-1/localauthority/10-test/com.example.pkla, test/polkitbackend/polkitbackendlocalauthoritytest.c. - debian/patches/CVE-2018-19788-3.patch: allow uid of -1 for a PolkitUnixProcess in src/polkit/polkitunixprocess.c. - CVE-2018-19788 Checksums-Sha1: 0ac7b9c31b463b2da0860cda95cf76d428ff34cf 7336 gir1.2-polkit-1.0_0.105-20ubuntu0.18.04.4_amd64.deb ba6d5b25b9ba1fabbf6d074f11f0106307df2e88 45244 libpolkit-agent-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb 7c5f2b4553c8aef45b3fb36c20ec93ffd590221e 14932 libpolkit-agent-1-0_0.105-20ubuntu0.18.04.4_amd64.deb d7ab8ac353dee70e8b7a78d105bdb2130d2db810 21216 libpolkit-agent-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb 7fc6ae30640bd955470ca5b7e8bcef211704c9f1 119808 libpolkit-backend-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb 87d863adf91a8fc8c0e3f894701f2dd0753b0aeb 36268 libpolkit-backend-1-0_0.105-20ubuntu0.18.04.4_amd64.deb 8ecdc9234f1f0d06d94942cae597de97fd3bd038 42200 libpolkit-backend-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb bf7b17872816814d56057011d6963c85b898e190 134796 libpolkit-gobject-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb 5155caf11ccf8c2eeb8121304179b9fa75232b47 36392 libpolkit-gobject-1-0_0.105-20ubuntu0.18.04.4_amd64.deb c2037b5c19cca1c638c6e9f29057983702735ce9 54352 libpolkit-gobject-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb 87d9288f8ff0aef9debcd49fa5b3a8c090169fbd 84612 policykit-1-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb f4b662fab4286f7402af9ceb8af4d36445d7e53b 252764 policykit-1-doc_0.105-20ubuntu0.18.04.4_all.deb 326a99e9dc5fb900927866a20c861508d05dbfbb 12812 policykit-1_0.105-20ubuntu0.18.04.4_amd64.buildinfo 405ec7f5c145827203fa924845c5a603feefcd26 53508 policykit-1_0.105-20ubuntu0.18.04.4_amd64.deb 8555cac488c1db8c71bbf16eafafe38533a38e35 1800 policykit-1_0.105-20ubuntu0.18.04.4_amd64_translations.tar.gz Checksums-Sha256: 92726374c5c979c2ad23c3af4a05b8876e5edc76c0f49dbdf8287e7c960219fb 7336 gir1.2-polkit-1.0_0.105-20ubuntu0.18.04.4_amd64.deb 1b30b7a5b32dd4adfe6f0974156a12c4d3c0a6ecd0c6854d656a235101e806ce 45244 libpolkit-agent-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb 6250f1a57c16b6bc91bf41911fbe1ae9cfb38422a5e42d77cca4bd8b05f28986 14932 libpolkit-agent-1-0_0.105-20ubuntu0.18.04.4_amd64.deb 135eeb49cb509ab8c9a6f43fa54fa683499be9641b4a8f6151484ccd7a09a1ae 21216 libpolkit-agent-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb 44cdc496a27263954643a7e9b2ff4a618d9bb23447d9029b7968edf7c4b079f7 119808 libpolkit-backend-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb b6a2327cf05cddb73d744f6b6a0c5f2f031fcd407791f7aa95272c014b7b899f 36268 libpolkit-backend-1-0_0.105-20ubuntu0.18.04.4_amd64.deb f1d9c94963d02764c86e5dd0c3eae0c64496da4e45ec1ec53184e1eda5f426ab 42200 libpolkit-backend-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb 535caf761999aab56a5a3b6aa69ac1e000bbbc9966d68aeba9539798b3fda304 134796 libpolkit-gobject-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb dbbc11b3fe85663b9811de0d113831eb2e2ca8288d4b9a18e5036395dcbb6d3d 36392 libpolkit-gobject-1-0_0.105-20ubuntu0.18.04.4_amd64.deb efec3c3970950bcff87a69ea015306d51b07585af4124c0132c30ee30f3bfc69 54352 libpolkit-gobject-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb 9bd5db4be45110a86695c1ef30cac6cd1c4e96de0a33bfc5e54378df23047844 84612 policykit-1-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb 5063d9683771a08e15e5d932b4aac43dbb64c8a567741180771f6a167d289214 252764 policykit-1-doc_0.105-20ubuntu0.18.04.4_all.deb 60fc0ec8638bd1d6e1fdf5a50cd53108aaf44c0225d728613afa51ef603df30e 12812 policykit-1_0.105-20ubuntu0.18.04.4_amd64.buildinfo 078acfd6f6257fbc17091f62f6a02988c77240fac939317bbfc7119386b23437 53508 policykit-1_0.105-20ubuntu0.18.04.4_amd64.deb 0dde9d9a13b738f69d238097a328749428dd43c2fdb182bc9db668337fcba1b1 1800 policykit-1_0.105-20ubuntu0.18.04.4_amd64_translations.tar.gz Files: 82b2e79b15ff7d7e7ba114477549cc10 7336 introspection optional gir1.2-polkit-1.0_0.105-20ubuntu0.18.04.4_amd64.deb 46015e5e8636f641cfda57a36a9aa28f 45244 debug optional libpolkit-agent-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb ba2cb0f89b96be3e0c6211ab33dcf764 14932 libs optional libpolkit-agent-1-0_0.105-20ubuntu0.18.04.4_amd64.deb 6a8374b61a1ba516f9aedfe978c7b594 21216 libdevel optional libpolkit-agent-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb 9e3a90cc02e81c614bb0f115f5d74620 119808 debug optional libpolkit-backend-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb fbdb9ddd71b3e89dd23f05e25061963d 36268 libs optional libpolkit-backend-1-0_0.105-20ubuntu0.18.04.4_amd64.deb 989c26006ad55cd64347801aff73a0ae 42200 libdevel optional libpolkit-backend-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb 5a8f307e7cd2e9558180d128dcaa0734 134796 debug optional libpolkit-gobject-1-0-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb 9ee066fdab90bc5e31c97fc16f50b722 36392 libs optional libpolkit-gobject-1-0_0.105-20ubuntu0.18.04.4_amd64.deb 02d89f6a368ea4ee1f65205d419ab660 54352 libdevel optional libpolkit-gobject-1-dev_0.105-20ubuntu0.18.04.4_amd64.deb 88dd018550247a89f4555bb10bf30fd9 84612 debug optional policykit-1-dbgsym_0.105-20ubuntu0.18.04.4_amd64.ddeb 9ba48fbff54a7fa0a347a29f9ba46915 252764 doc optional policykit-1-doc_0.105-20ubuntu0.18.04.4_all.deb 1e87c4322353b2f87e92f451fa694cff 12812 admin optional policykit-1_0.105-20ubuntu0.18.04.4_amd64.buildinfo becb0ee1097dbd430b5d8be872fd1e11 53508 admin optional policykit-1_0.105-20ubuntu0.18.04.4_amd64.deb eddc4d2656c2a7b136a2624bb3b66e51 1800 raw-translations - policykit-1_0.105-20ubuntu0.18.04.4_amd64_translations.tar.gz Original-Maintainer: Utopia Maintenance Team