[CLSA-2026:1780070303] polkit: Fix of CVE-2018-1116
Type:
security
Severity:
Moderate
Release date:
2026-05-30 10:24:38 UTC
Description:
- CVE-2018-1116: polkit trusts client-supplied UID in CheckAuthorization, allowing a local attacker to spoof or DoS the authentication-agent dialog of unrelated processes.
Updated packages:
  • polkit-0.96-11.el6_10.1.tuxcare.els2.i686.rpm
    sha:ec87a4f66b77f1d7ca5e794537c81e24fbf80cee35d1fd75cc0d77fb5c41f100
  • polkit-0.96-11.el6_10.1.tuxcare.els2.x86_64.rpm
    sha:35bbeda721146f2e7527a9dea1088636c5303fe4a346f781a02444d07eb12072
  • polkit-desktop-policy-0.96-11.el6_10.1.tuxcare.els2.noarch.rpm
    sha:17a4a21620873b08a05eb6a9ee83bd0f7aafc83cc6b78f0ef2c82ea1d6dcfd0f
  • polkit-devel-0.96-11.el6_10.1.tuxcare.els2.i686.rpm
    sha:78634f95d443ec52a62d8369f311c99c19810927f20a49a611d36edc8ff75ee0
  • polkit-devel-0.96-11.el6_10.1.tuxcare.els2.x86_64.rpm
    sha:ce73506b969569bae0790ad862887855878714b827a2e4ec022cd24afced022e
  • polkit-docs-0.96-11.el6_10.1.tuxcare.els2.x86_64.rpm
    sha:fabcddbda5ba1879aa1ac6bcd76efd902564dc75d88f4fc7ee767f99d46755bb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.