Bugzilla – Bug 939246
VUL-0: CVE-2015-3255: polkit: Heap-corruption on duplicate ids
Last modified: 2016-04-27 19:43:22 UTC
rh#1245673 Heap corruption on duplicate ID in /usr/share/polkit-1/actions https://bugs.freedesktop.org/show_bug.cgi?id=83590 References: https://bugzilla.redhat.com/show_bug.cgi?id=1245673 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3255 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3255
Created attachment 641832 [details] Upstream patch
bugbot adjusting priority
SLE11 PolicyKit is good, it passes in a copy: g_hash_table_insert (already_shown, g_strdup (action_id), (gpointer) 1);
openSUSE-SU-2015:1734-1: An update that fixes four vulnerabilities is now available. Category: security (important) Bug References: 933922,935119,939246,943816 CVE References: CVE-2015-3218,CVE-2015-3255,CVE-2015-3256,CVE-2015-4625 Sources used: openSUSE 13.2 (src): polkit-0.113-3.8.1 openSUSE 13.1 (src): polkit-0.113-9.1
SUSE-SU-2015:1838-1: An update that solves four vulnerabilities and has two fixes is now available. Category: security (moderate) Bug References: 912889,933922,935119,939246,943816,950114 CVE References: CVE-2015-3218,CVE-2015-3255,CVE-2015-3256,CVE-2015-4625 Sources used: SUSE Linux Enterprise Workstation Extension 12 (src): polkit-0.113-4.1 SUSE Linux Enterprise Software Development Kit 12 (src): polkit-0.113-4.1 SUSE Linux Enterprise Server 12 (src): polkit-0.113-4.1 SUSE Linux Enterprise Desktop 12 (src): polkit-0.113-4.1
openSUSE-SU-2015:1927-1: An update that solves four vulnerabilities and has two fixes is now available. Category: security (moderate) Bug References: 912889,933922,935119,939246,943816,950114 CVE References: CVE-2015-3218,CVE-2015-3255,CVE-2015-3256,CVE-2015-4625 Sources used: openSUSE Leap 42.1 (src): polkit-0.113-6.1
released