Format: 1.8 Date: Tue, 15 Jan 2019 08:18:22 -0500 Source: policykit-1 Binary: policykit-1 policykit-1-doc libpolkit-gobject-1-0 libpolkit-gobject-1-dev libpolkit-agent-1-0 libpolkit-agent-1-dev libpolkit-backend-1-0 libpolkit-backend-1-dev gir1.2-polkit-1.0 Architecture: i386 i386_translations Version: 0.105-20ubuntu0.18.04.4 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gir1.2-polkit-1.0 - GObject introspection data for PolicyKit libpolkit-agent-1-0 - PolicyKit Authentication Agent API libpolkit-agent-1-dev - PolicyKit Authentication Agent API - development files libpolkit-backend-1-0 - PolicyKit backend API libpolkit-backend-1-dev - PolicyKit backend API - development files libpolkit-gobject-1-0 - PolicyKit Authorization API libpolkit-gobject-1-dev - PolicyKit Authorization API - development files policykit-1 - framework for managing administrative policies and privileges policykit-1-doc - documentation for PolicyKit-1 Changes: policykit-1 (0.105-20ubuntu0.18.04.4) bionic-security; urgency=medium . * SECURITY UPDATE: authorization bypass with large uid - debian/patches/CVE-2018-19788-1.patch: allow negative uids/gids in PolkitUnixUser and Group objects in src/polkit/polkitunixgroup.c, src/polkit/polkitunixprocess.c, src/polkit/polkitunixuser.c. - debian/patches/CVE-2018-19788-2.patch: add tests to test/data/etc/group, test/data/etc/passwd, test/data/etc/polkit-1/localauthority/10-test/com.example.pkla, test/polkitbackend/polkitbackendlocalauthoritytest.c. - debian/patches/CVE-2018-19788-3.patch: allow uid of -1 for a PolkitUnixProcess in src/polkit/polkitunixprocess.c. - CVE-2018-19788 Checksums-Sha1: afed89ef3f9dd81b47b5e00925226ea349e2862c 7344 gir1.2-polkit-1.0_0.105-20ubuntu0.18.04.4_i386.deb b2ce4bd110e1765ad77ce9e9b8e13a7af81dacd5 40396 libpolkit-agent-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 2df77bef54fca4dc988c990856c3a9920c04315a 16056 libpolkit-agent-1-0_0.105-20ubuntu0.18.04.4_i386.deb 049e22ef633fafb31447a0a395314d45e510deef 22616 libpolkit-agent-1-dev_0.105-20ubuntu0.18.04.4_i386.deb f0a75ad7cef724c06b60b5d69d2b6aa62d266ac2 101536 libpolkit-backend-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 3f3b1a1247bba5629e87b54e134b40f704fe59b1 40848 libpolkit-backend-1-0_0.105-20ubuntu0.18.04.4_i386.deb d7a770980a48ef67484a16980dda854c2448e863 47668 libpolkit-backend-1-dev_0.105-20ubuntu0.18.04.4_i386.deb 07822dfa5913dd9aae0644e32f5ceecf53f5e13b 109892 libpolkit-gobject-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb e6ed69e48898ca8b87a3a3768b9a880edfdcd303 38492 libpolkit-gobject-1-0_0.105-20ubuntu0.18.04.4_i386.deb 6dd5c6e10e5fc552660df909b79f75a2f44c5f05 58192 libpolkit-gobject-1-dev_0.105-20ubuntu0.18.04.4_i386.deb 0dbfde6b20b5aad84ae8257b7d8b1b93c1745990 77216 policykit-1-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 45aa52dfcbeb118143754cf1303dc0ba8e306309 12388 policykit-1_0.105-20ubuntu0.18.04.4_i386.buildinfo f7f2bbc095bf0d1bed94dfa9f7d6b5be9f68d297 54164 policykit-1_0.105-20ubuntu0.18.04.4_i386.deb 0c60af3ba01474797198b1ac5789b1556218c05b 1803 policykit-1_0.105-20ubuntu0.18.04.4_i386_translations.tar.gz Checksums-Sha256: 464fd4f285950edd0a686f2e57114623d97452b4d02c1b07dbfa27632409d76e 7344 gir1.2-polkit-1.0_0.105-20ubuntu0.18.04.4_i386.deb 73952104309a3446fd4ac7c032028189584310f2aebc528e66e72ee19d46f16c 40396 libpolkit-agent-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 21fd891919ff2be2b0905dac907c0f5fa75ac41c73f480473508f895d9b6bf4a 16056 libpolkit-agent-1-0_0.105-20ubuntu0.18.04.4_i386.deb 69551d0821b39db3afd468e1dd360145bebdc93adb97a7e6ebec1d6fd611070d 22616 libpolkit-agent-1-dev_0.105-20ubuntu0.18.04.4_i386.deb 3c1146d5945a0f3873be8e04a70c94e58846576b4e69170c6b7f73c35ae18e0f 101536 libpolkit-backend-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 42d9f1afef86c53726fd822c3382c15805f21396982c8a2d3350797444805503 40848 libpolkit-backend-1-0_0.105-20ubuntu0.18.04.4_i386.deb 9fdd5312150c57ca436808a65cc9f2a18550189d865b705563120524742017fe 47668 libpolkit-backend-1-dev_0.105-20ubuntu0.18.04.4_i386.deb 0514f6baa3667a1936666b9efa61d6cece1fcbdfb33c85ca793f2b7feacb08af 109892 libpolkit-gobject-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 7c5fa07a3e73cf6cb44c023fd6458e4f2b3c544400c8782a230dd614859ab5df 38492 libpolkit-gobject-1-0_0.105-20ubuntu0.18.04.4_i386.deb 324bf619b4c1e5d997da0cd063db11587e3cd61753c0e8cbc876c53628e07736 58192 libpolkit-gobject-1-dev_0.105-20ubuntu0.18.04.4_i386.deb 330d43dee573b7f98d886526c197dd41bf11610baab65fd3cf6e52591cafd8a0 77216 policykit-1-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 291cd65085017becc97a00e6a3991ea3756d80c67a8cb0d2572f630e08ce43e9 12388 policykit-1_0.105-20ubuntu0.18.04.4_i386.buildinfo 07137ba40427b627f7d57803a19e8e9003a7097604f100f62bbb416cf2bb1577 54164 policykit-1_0.105-20ubuntu0.18.04.4_i386.deb 5ef77fa8fe78442e121193c2c729bcc0467c2895b895a1460cbb0e3cd5248787 1803 policykit-1_0.105-20ubuntu0.18.04.4_i386_translations.tar.gz Files: 8d16ee76a9ee177480f7e7174478cb0c 7344 introspection optional gir1.2-polkit-1.0_0.105-20ubuntu0.18.04.4_i386.deb 864fb949be6dff79bebf4e9be329832c 40396 debug optional libpolkit-agent-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb a605640fc501f44e2c585f78d7d4eb0a 16056 libs optional libpolkit-agent-1-0_0.105-20ubuntu0.18.04.4_i386.deb e2b2418e04f1900b8b275befcdebe00f 22616 libdevel optional libpolkit-agent-1-dev_0.105-20ubuntu0.18.04.4_i386.deb 6859089307e17bcf236c590d81f990c3 101536 debug optional libpolkit-backend-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 5d15441d9557f15c448c206a38821b3b 40848 libs optional libpolkit-backend-1-0_0.105-20ubuntu0.18.04.4_i386.deb 145f124e33091667d57a5f0ab95b6bff 47668 libdevel optional libpolkit-backend-1-dev_0.105-20ubuntu0.18.04.4_i386.deb f0254736baf53c2df8c20f2a3bcc4fb3 109892 debug optional libpolkit-gobject-1-0-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb 2d2fef26f535ceb07f32c648c42fce03 38492 libs optional libpolkit-gobject-1-0_0.105-20ubuntu0.18.04.4_i386.deb 9f515a0f37df262f8a4e18fa24bef337 58192 libdevel optional libpolkit-gobject-1-dev_0.105-20ubuntu0.18.04.4_i386.deb 0f2f86187f870782ee369dd3326ae51e 77216 debug optional policykit-1-dbgsym_0.105-20ubuntu0.18.04.4_i386.ddeb d133263d312ac4c53143df58fb7468fe 12388 admin optional policykit-1_0.105-20ubuntu0.18.04.4_i386.buildinfo 442869290642ddaac1a1883ec231a330 54164 admin optional policykit-1_0.105-20ubuntu0.18.04.4_i386.deb bc8896f1b887e6c5a37e60b76ff587db 1803 raw-translations - policykit-1_0.105-20ubuntu0.18.04.4_i386_translations.tar.gz Original-Maintainer: Utopia Maintenance Team