SUSE-SU-2024:0010-1: Security update for polkit
This update for polkit fixes the following issues: Change permissions for rules folders (bsc#1209282)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/polkitto a version that resolves this vulnerability.Fixed in 0.116-150200.3.12.1 - Upgrade
Upgrade
suse/polkit-debuginfoto a version that resolves this vulnerability.Fixed in 0.116-150200.3.12.1 - Upgrade
Upgrade
suse/libpolkit0to a version that resolves this vulnerability.Fixed in 0.116-150200.3.12.1 - Upgrade
Upgrade
suse/libpolkit0-debuginfoto a version that resolves this vulnerability.Fixed in 0.116-150200.3.12.1 - Upgrade
Upgrade
suse/polkit-debugsourceto a version that resolves this vulnerability.Fixed in 0.116-150200.3.12.1 - Upgrade
Upgrade
suse/polkit-devel-debuginfoto a version that resolves this vulnerability.Fixed in 0.116-150200.3.12.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-Polkit-1_0-0.116-150200.3.12.1 - Upgrade
Upgrade
suse/polkit-develto a version that resolves this vulnerability.Fixed in 0.116-150200.3.12.1 - Upgrade
Upgrade
suse/libpolkit0to a version that resolves this vulnerability.Fixed in 32bit-0.116-150200.3.12.1 - Upgrade
Upgrade
suse/libpolkit0to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-0.116-150200.3.12.1 - Upgrade
Upgrade
suse/polkit-docto a version that resolves this vulnerability.Fixed in 0.116-150200.3.12.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2024-10=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2024-10=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2024-10=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2024-10=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2024-10=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2024-10=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2024-10=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2024-10=1
Event History
Frequently Asked Questions
Which installed packages are relevant when assessing exposure?
The update covers polkit and libpolkit0, along with related development, typelib, debug, debuginfo, and debugsource packages. Systems using the affected polkit or libpolkit0 packages should be reviewed.
What is the security-relevant change in this update?
The update changes permissions for polkit rules folders. The provided information does not specify the prior permissions, affected configurations, or an exploitation method.
How can I determine whether the system has received the fix?
Check whether the applicable SUSE security update SUSE-SU-2024:0010-1 has been installed for the polkit and libpolkit0 packages present on the system. The advisory was published and modified on 2024-01-02.