Mageia alert MGASA-2017-0218 (cinnamon-settings-daemon)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2017-0218: Updated cinnamon-settings-daemon packages fix security vulnerability 
Date:
    	     
 
Wed, 26 Jul 2017 00:07:47 +0200
Message-ID:
    	     
 
<20170725220747.E6EB39F876@duvel.mageia.org>
MGASA-2017-0218 - Updated cinnamon-settings-daemon packages fix security vulnerability

Publication date: 25 Jul 2017
URL: http://advisories.mageia.org/MGASA-2017-0218.html
Type: security
Affected Mageia releases: 5

Description:
It was found that csd-datetime-setting SetDate DBUS function does not
check the polkit authorization for the caller, Unlike SetTime.

References:
- https://bugs.mageia.org/show_bug.cgi?id=20900
- https://bugzilla.redhat.com/show_bug.cgi?id=1276639
- https://bugzilla.suse.com/show_bug.cgi?id=951830

SRPMS:
- 5/core/cinnamon-settings-daemon-2.4.3-2.1.mga5