Format: 1.8 Date: Tue, 15 Jan 2019 08:19:19 -0500 Source: policykit-1 Binary: policykit-1 policykit-1-doc libpolkit-gobject-1-0 libpolkit-gobject-1-dev libpolkit-agent-1-0 libpolkit-agent-1-dev libpolkit-backend-1-0 libpolkit-backend-1-dev gir1.2-polkit-1.0 Architecture: arm64 arm64_translations Version: 0.105-14.1ubuntu0.4 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gir1.2-polkit-1.0 - GObject introspection data for PolicyKit libpolkit-agent-1-0 - PolicyKit Authentication Agent API libpolkit-agent-1-dev - PolicyKit Authentication Agent API - development files libpolkit-backend-1-0 - PolicyKit backend API libpolkit-backend-1-dev - PolicyKit backend API - development files libpolkit-gobject-1-0 - PolicyKit Authorization API libpolkit-gobject-1-dev - PolicyKit Authorization API - development files policykit-1 - framework for managing administrative policies and privileges policykit-1-doc - documentation for PolicyKit-1 Changes: policykit-1 (0.105-14.1ubuntu0.4) xenial-security; urgency=medium . * SECURITY UPDATE: authorization bypass with large uid - debian/patches/CVE-2018-19788-1.patch: allow negative uids/gids in PolkitUnixUser and Group objects in src/polkit/polkitunixgroup.c, src/polkit/polkitunixprocess.c, src/polkit/polkitunixuser.c. - debian/patches/CVE-2018-19788-2.patch: add tests to test/data/etc/group, test/data/etc/passwd, test/data/etc/polkit-1/localauthority/10-test/com.example.pkla, test/polkitbackend/polkitbackendlocalauthoritytest.c. - debian/patches/CVE-2018-19788-3.patch: allow uid of -1 for a PolkitUnixProcess in src/polkit/polkitunixprocess.c. - CVE-2018-19788 Checksums-Sha1: 397d741c45d9e8f896789c952ed545f3883404cf 7248 gir1.2-polkit-1.0_0.105-14.1ubuntu0.4_arm64.deb 7e943bb0a680b4148a8831e068814c36cd07f8b7 32876 libpolkit-agent-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb dc6eed795c248f780d63c0ef5dc7225b9c893da5 12766 libpolkit-agent-1-0_0.105-14.1ubuntu0.4_arm64.deb ee4b76025fbe7617335f25b64ae6926719b23b06 19834 libpolkit-agent-1-dev_0.105-14.1ubuntu0.4_arm64.deb 5a0b5301a29553fb0344dcbf60439a2dab49b2f6 86814 libpolkit-backend-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb 41ed565477733808666929ec6ed498526b3ca891 29700 libpolkit-backend-1-0_0.105-14.1ubuntu0.4_arm64.deb 85835c97d27b5c49492425e02f15e92af64b311f 38160 libpolkit-backend-1-dev_0.105-14.1ubuntu0.4_arm64.deb 1ebcdc91a3c3caae315edcc67ec3fd938b8da294 88092 libpolkit-gobject-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb d2f53eb0ea97e2b6ffd1836f142b2c896be6e5a9 29854 libpolkit-gobject-1-0_0.105-14.1ubuntu0.4_arm64.deb bc521199966fe3b70173ab30a54294d618978377 50878 libpolkit-gobject-1-dev_0.105-14.1ubuntu0.4_arm64.deb 0497ab398d5491fc245b324e091026df971c289c 52070 policykit-1-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb 83ac199db71d3d4df59054ada477cd07f09eb1db 52082 policykit-1_0.105-14.1ubuntu0.4_arm64.deb 49614b073bc7d5d41338c2df40cfa29892ad6f31 1808 policykit-1_0.105-14.1ubuntu0.4_arm64_translations.tar.gz Checksums-Sha256: 532bec8ed04bfa9bd605509aa4625497df48fbe393ab4c646f3253bcede35da6 7248 gir1.2-polkit-1.0_0.105-14.1ubuntu0.4_arm64.deb f0924ea9f476c1d391f0fd872083cf382b8de10b2ef01a0524a0b2b42135b8ab 32876 libpolkit-agent-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb bce62db602184fec86dbf5eb58ea21977da22259b9cbfe9d1fcc075a441bfa39 12766 libpolkit-agent-1-0_0.105-14.1ubuntu0.4_arm64.deb 362d97f584783296fce85f6a459a2d96842f99d50662d1a4f06dba05ec0e6be7 19834 libpolkit-agent-1-dev_0.105-14.1ubuntu0.4_arm64.deb 5873d8605a8213cf5404b996ad2f984c2d389df9873cb0ba96621b00d76eb7a5 86814 libpolkit-backend-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb a921dec5943963d36cff44f318f94535edc42fc23d7d6383f43103dbeb29e164 29700 libpolkit-backend-1-0_0.105-14.1ubuntu0.4_arm64.deb c3d8adfe427eae024e85073d2c7e31d8ce1588f44d24c75ff6001678064f99b2 38160 libpolkit-backend-1-dev_0.105-14.1ubuntu0.4_arm64.deb 2d15a286809d1cc6dded92593707b13e69e38de01b8977b287c2c4dedd11cd34 88092 libpolkit-gobject-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb 52cfa00b251e21cd0247cd21fdf6902bd4231bedfa1560e49cae753c1a723b80 29854 libpolkit-gobject-1-0_0.105-14.1ubuntu0.4_arm64.deb e1fe36630acdb610e3c3e10009760a4489abcfd8ff7747c6365227674a7ad835 50878 libpolkit-gobject-1-dev_0.105-14.1ubuntu0.4_arm64.deb 027db8c8e0f30d2597b0745e2443f3daf0bb7dba423fb5706af89662dd4a68a3 52070 policykit-1-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb f4b88fafa349fc2069b5235c7ea19df9db6a5d8a76bb283ac16e9b53d8df96ef 52082 policykit-1_0.105-14.1ubuntu0.4_arm64.deb 3748e0a38e920ccf4e5459cfb1cbd52e2a6739f5de7b61e35024200db7161ffe 1808 policykit-1_0.105-14.1ubuntu0.4_arm64_translations.tar.gz Files: 8f5c63c3d3872abf500ecec1aa9db475 7248 introspection optional gir1.2-polkit-1.0_0.105-14.1ubuntu0.4_arm64.deb 4b3dcee19928611f793acb0aa8068a3c 32876 libs extra libpolkit-agent-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb 3b7bf39c6c20be07d85fbcfbc8c55bae 12766 libs optional libpolkit-agent-1-0_0.105-14.1ubuntu0.4_arm64.deb 4080ee2b8b2326530d8a5edce0cb4b78 19834 libdevel optional libpolkit-agent-1-dev_0.105-14.1ubuntu0.4_arm64.deb 268d6ab2e132771abd6156140a419dc9 86814 libs extra libpolkit-backend-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb 69c0e3e70ca8c8bb278d66e6f5bb9fb3 29700 libs optional libpolkit-backend-1-0_0.105-14.1ubuntu0.4_arm64.deb 088fed3ca17a23eb7d7d51fa504b9c87 38160 libdevel optional libpolkit-backend-1-dev_0.105-14.1ubuntu0.4_arm64.deb bda1ef6b7bea73727780883dd8cca19b 88092 libs extra libpolkit-gobject-1-0-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb b54001fef5a1d9ab50c707588bb9dabb 29854 libs optional libpolkit-gobject-1-0_0.105-14.1ubuntu0.4_arm64.deb 00ac3cae10b23bf9c084057c405b0f0c 50878 libdevel optional libpolkit-gobject-1-dev_0.105-14.1ubuntu0.4_arm64.deb b9f585c3ca528f75d2132d58690d3b19 52070 admin extra policykit-1-dbgsym_0.105-14.1ubuntu0.4_arm64.ddeb bdd05eab2f30c4209c563c3338f9e799 52082 admin optional policykit-1_0.105-14.1ubuntu0.4_arm64.deb ed644d11062d99336a6deb2dc68fef4b 1808 raw-translations - policykit-1_0.105-14.1ubuntu0.4_arm64_translations.tar.gz Original-Maintainer: Utopia Maintenance Team