{"schemaVersion":3,"id":"MGASA-2013-0293","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated polkit package and the packages that call polkit fixes security vulnerability\n\nA race condition was found in the way the PolicyKit pkcheck utility\nchecked process authorization when the process was specified by its\nprocess ID via the --process option. A local user could use this flaw to\nbypass intended PolicyKit authorizations and escalate their privileges\n(CVE-2013-4288).\n\nNote: Applications that invoke pkcheck with the --process option need to\nbe modified to use the pid,pid-start-time,uid argument for that option, to\nallow pkcheck to check process authorization correctly.\n\nBecause of the change in the PolicyKit API, the spice-gtk (CVE-2013-4324),\nhplip (CVE-2013-4325), rtkit (CVE-2013-4326), and systemd (CVE-2013-4327)\npackages have been updated to use a different API that is not affected by\nthis PolicyKit vulnerability.  The libvirt package will also be updated\nfor the same reason, but this update will come in a separate advisory.","dates":{"published":"2013-10-05T17:53:02.000Z","modified":"2026-04-16T06:24:12.682Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"hplip","name":"hplip","label":"hplip","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/hplip","purlType":"rpm","versions":[{"text":"< 3.12.4-1.3.mga2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.4-1.3.mga2","eol":null,"hubHref":null},{"vendor":"mageia","product":"polkit","name":"polkit","label":"polkit","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/polkit","purlType":"rpm","versions":[{"text":"< 0.104-4.2.mga2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.104-4.2.mga2","eol":null,"hubHref":null},{"vendor":"mageia","product":"rtkit","name":"rtkit","label":"rtkit","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/rtkit","purlType":"rpm","versions":[{"text":"< 0.10-3.1.mga2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10-3.1.mga2","eol":null,"hubHref":null},{"vendor":"mageia","product":"spice-gtk","name":"spice-gtk","label":"spice-gtk","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/spice-gtk","purlType":"rpm","versions":[{"text":"< 0.9-1.2.mga2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9-1.2.mga2","eol":null,"hubHref":null},{"vendor":"mageia","product":"systemd","name":"systemd","label":"systemd","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/systemd","purlType":"rpm","versions":[{"text":"< 44-13.1.mga2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 44-13.1.mga2","eol":null,"hubHref":null},{"vendor":"mageia","product":"hplip","name":"hplip","label":"hplip","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/hplip","purlType":"rpm","versions":[{"text":"< 3.12.9-6.1.mga3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.9-6.1.mga3","eol":null,"hubHref":null},{"vendor":"mageia","product":"polkit","name":"polkit","label":"polkit","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/polkit","purlType":"rpm","versions":[{"text":"< 0.107-6.1.mga3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.107-6.1.mga3","eol":null,"hubHref":null},{"vendor":"mageia","product":"rtkit","name":"rtkit","label":"rtkit","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/rtkit","purlType":"rpm","versions":[{"text":"< 0.11-3.1.mga3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11-3.1.mga3","eol":null,"hubHref":null},{"vendor":"mageia","product":"spice-gtk","name":"spice-gtk","label":"spice-gtk","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/spice-gtk","purlType":"rpm","versions":[{"text":"< 0.15-3.1.mga3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.15-3.1.mga3","eol":null,"hubHref":null},{"vendor":"mageia","product":"systemd","name":"systemd","label":"systemd","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/systemd","purlType":"rpm","versions":[{"text":"< 195-22.1.mga3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 195-22.1.mga3","eol":null,"hubHref":null}],"affectedCount":10,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2013-0293.html","label":"advisories.mageia.org/MGASA-2013-0293.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11260","label":"bugs.mageia.org/show_bug.cgi?id=11260","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1270.html","label":"rhn.redhat.com/errata/RHSA-2013-1270.html","hostname":"rhn.redhat.com","tags":["WEB"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1273.html","label":"rhn.redhat.com/errata/RHSA-2013-1273.html","hostname":"rhn.redhat.com","tags":["WEB"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1274.html","label":"rhn.redhat.com/errata/RHSA-2013-1274.html","hostname":"rhn.redhat.com","tags":["WEB"]},{"url":"http://www.ubuntu.com/usn/usn-1959-1/","label":"www.ubuntu.com/usn/usn-1959-1/","hostname":"www.ubuntu.com","tags":["WEB"]},{"url":"http://www.ubuntu.com/usn/usn-1961-1/","label":"www.ubuntu.com/usn/usn-1961-1/","hostname":"www.ubuntu.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2013-4288","CVE-2013-4324","CVE-2013-4325","CVE-2013-4326","CVE-2013-4327"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2013-10-05T17:53:02.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:24:12.682Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:25:27.228Z","stale":false,"partial":false}}