-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 28 Jan 2019 13:14:18 +0100 Source: policykit-1 Binary: policykit-1 policykit-1-doc libpolkit-gobject-1-0 libpolkit-gobject-1-dev libpolkit-agent-1-0 libpolkit-agent-1-dev libpolkit-backend-1-0 libpolkit-backend-1-dev gir1.2-polkit-1.0 Architecture: source amd64 all Version: 0.105-15~deb8u4 Distribution: jessie-security Urgency: medium Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: gir1.2-polkit-1.0 - GObject introspection data for PolicyKit libpolkit-agent-1-0 - PolicyKit Authentication Agent API libpolkit-agent-1-dev - PolicyKit Authentication Agent API - development files libpolkit-backend-1-0 - PolicyKit backend API libpolkit-backend-1-dev - PolicyKit backend API - development files libpolkit-gobject-1-0 - PolicyKit Authorization API libpolkit-gobject-1-dev - PolicyKit Authorization API - development files policykit-1 - framework for managing administrative policies and privileges policykit-1-doc - documentation for PolicyKit-1 Changes: policykit-1 (0.105-15~deb8u4) jessie-security; urgency=medium . * CVE-2018-19788: authorization bypass for users with a high id * CVE-2019-6133: authorization reuse due to insuficient uid checks. Checksums-Sha1: 3c849da797b2cf98c07863f1e5ce8ec7f16a7035 2929 policykit-1_0.105-15~deb8u4.dsc 53d56484a5bffb0aaf645c8d813b3063e01e8423 1431080 policykit-1_0.105.orig.tar.gz 293a004015e5afb9b311a86ac6acb3b5786820c1 48400 policykit-1_0.105-15~deb8u4.debian.tar.xz 29aa088b134bbabedaef178d679fa1862131a85a 62536 policykit-1_0.105-15~deb8u4_amd64.deb 4fae2beb01ef64128ffc3606d3de11cca08620e7 265372 policykit-1-doc_0.105-15~deb8u4_all.deb d64618edf02c29c01cc4cd58b7c79342e39d8af0 43688 libpolkit-gobject-1-0_0.105-15~deb8u4_amd64.deb 3160dca6df7d57c571cf3c0efe66d522b210d641 62716 libpolkit-gobject-1-dev_0.105-15~deb8u4_amd64.deb 6f08c0dab7e709b7a774f37fbb7355231f8f2c86 24288 libpolkit-agent-1-0_0.105-15~deb8u4_amd64.deb 7c81e17e061b5b4ea7d026491577ebee8d1281d4 30158 libpolkit-agent-1-dev_0.105-15~deb8u4_amd64.deb b466e412b25dfb28ded100a9d6b723f3bd73e5e0 45874 libpolkit-backend-1-0_0.105-15~deb8u4_amd64.deb d46e012bc4bf29324067dccdf2f11aa729bbf80d 50302 libpolkit-backend-1-dev_0.105-15~deb8u4_amd64.deb 76107e0f72d247d42e96045cea4a14717c966051 16482 gir1.2-polkit-1.0_0.105-15~deb8u4_amd64.deb Checksums-Sha256: f3308146e233c1a4371fa28df775ac23ad0d5179721ca3623cbf116a4a032468 2929 policykit-1_0.105-15~deb8u4.dsc 8fdc7cc8ba4750fcce1a4db9daa759c12afebc7901237e1c993c38f08985e1df 1431080 policykit-1_0.105.orig.tar.gz ee977935d8850a9814a6de66e1eb5c7aaa461530a1f4719b933530c177cdd952 48400 policykit-1_0.105-15~deb8u4.debian.tar.xz 542ce2b71aa6f828f5d37bf5d762f34074f9d712d4da61c937e589c838ec2f26 62536 policykit-1_0.105-15~deb8u4_amd64.deb a847f1acda7686e9001ff4bf434d9a7ff0cf79a3bfe1d88dfc2707feb3d68033 265372 policykit-1-doc_0.105-15~deb8u4_all.deb d534a01e29317c87157712fe6ab0189caad06c2d788138f1a5aef67189484042 43688 libpolkit-gobject-1-0_0.105-15~deb8u4_amd64.deb 24cab7df11a84fb6cbf5645740efb875f77fe0d9aa34bf709b4eb561d1b75d6a 62716 libpolkit-gobject-1-dev_0.105-15~deb8u4_amd64.deb 576d8141759bd13841b00fc0c83f0465c01e9df158bfaeafe25b998109768685 24288 libpolkit-agent-1-0_0.105-15~deb8u4_amd64.deb 7db50a3010a938b9acbdbaa9a058121b657939b0cc6eb56bca10fae9cb1c0ddd 30158 libpolkit-agent-1-dev_0.105-15~deb8u4_amd64.deb 536f2df9dac5c91b8dcd426f1b966bf133b776b1a0d697be4b4b50e172f32f64 45874 libpolkit-backend-1-0_0.105-15~deb8u4_amd64.deb cb8ce4545893d2b6a30b9aa01b1c702b341dc86e92445b2b2e141f038ab8cdcd 50302 libpolkit-backend-1-dev_0.105-15~deb8u4_amd64.deb f280fb80eca5d5820d2e114cee026d48064d304f8d8ab5dc38c44fda05298962 16482 gir1.2-polkit-1.0_0.105-15~deb8u4_amd64.deb Files: d612b6d7ac776445cf860635719e3fcb 2929 admin optional policykit-1_0.105-15~deb8u4.dsc 9c29e1b6c214f0bd6f1d4ee303dfaed9 1431080 admin optional policykit-1_0.105.orig.tar.gz bb5c063c8db8a32399a232c5c4344afe 48400 admin optional policykit-1_0.105-15~deb8u4.debian.tar.xz 19771576e55e667d03865b18acfccd23 62536 admin optional policykit-1_0.105-15~deb8u4_amd64.deb 037413485db855733c8b2d719a1d471c 265372 doc optional policykit-1-doc_0.105-15~deb8u4_all.deb f8b307c6e1f20abd97826aacc3915c3e 43688 libs optional libpolkit-gobject-1-0_0.105-15~deb8u4_amd64.deb fe8cb36a9fef25fc2c350cea7bd5b4b1 62716 libdevel optional libpolkit-gobject-1-dev_0.105-15~deb8u4_amd64.deb d747b8020ac4c1bde06c04fcacf94d7f 24288 libs optional libpolkit-agent-1-0_0.105-15~deb8u4_amd64.deb 94573e1a33cfa5122cff4c13364b3a8a 30158 libdevel optional libpolkit-agent-1-dev_0.105-15~deb8u4_amd64.deb a4cdc354ceb3ef1f4a96a808c5c18a32 45874 libs optional libpolkit-backend-1-0_0.105-15~deb8u4_amd64.deb 4229b2c8409367cda1f28af1fae2480a 50302 libdevel optional libpolkit-backend-1-dev_0.105-15~deb8u4_amd64.deb 78bdd54189b98d0acce7657b4bc23469 16482 introspection optional gir1.2-polkit-1.0_0.105-15~deb8u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAlxO9CYACgkQnUbEiOQ2 gwLo+RAAivTKboWE76BLYhc5xX7vZ4QAWXJR2qtFXzOvTg92k+BYW7aM1s7HnvgO MLKpvQt3Q7cmo77/8cSeoJwxsdsV5yG2e8bqu7jNM9cqD9fLe+8tncYSSOilrH7q BHgbVXwao0C0oDiFBPpN8ImIY2DloJB1m+VFCStmJX00BLTOm8jL1JOBW3R502iR 1YsEwlNW8v8r2Lw7BgZjD4PH7rQEZoaM1x5yERYCezOh8FGSWNlhUCYDC+smo7AL iwRUwVHlyLacFSuExQEFZCbC5OfhFowjkBsi+bvRGC5LGwITbOvNO5ZOpSsXz9de 7pTD1xg7KqwCEPtsbCiedpozKNalHdEuzF+vR81n0TTkQhsG82VI/KVbP+r0c2z3 zQgoui+eVCEc9xQcn75qvxOORTb+ctl6bVNbmzsOFEdtAGiG8wxkjT1iE3+RjLL4 IzWnW+mJL6oQM2fY88XLuE6IeCE2RTBwBPI9mRsPEMNwhfRpgD43J8v09sXRlTdO T+fVfw/tXFdotRL8qFv31vOW9FG0DF6NCCG90n3P484cFoe+CWoHjo/9Ywnmenfo lhY9aKM0ascj3NhQW1OGs531XLwJ7oKuiEJykz50DJg8Ikweqz40KeuUt4ovMs0b howQeMZLKpJAvz5Po2Sw0lejlrJzz9nGWzeawdkTMGWeB0XpQoo= =J3cn -----END PGP SIGNATURE-----