The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condition (time of check, time of use). With this authorization method, the owner of a process requesting a polkit operation is checked by polkitd via /proc/<pid>/status, by which time the requesting process may have been replaced by a different process with the same PID that has different privileges then the original requester.

- update to 1.1.20

  - fixes CVE-2017-7572

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for backintime to version 1.1.20 fixes several issues.

These security issues were fixed :

  - CVE-2017-7572: The _checkPolkitPrivilege function in     serviceHelper.py in backintime used a deprecated polkit     authorization method (unix-process) that is subject to a     race condition (time of check, time of use)     (bsc#1032717).

  - Don't store passwords given to polkit helper

  - boo#1007723: General security hardening measures 

These non-security issues were fixed :

  - Delete udev configuration files on uninstall

  - Merge doc subpackage into main package

ID	Name	Product	Family	Severity
101610	Fedora 26 : backintime (2017-36eb9502b0)	Nessus	Fedora Local Security Checks	high
99751	openSUSE Security Update : backintime (openSUSE-2017-525)	Nessus	SuSE Local Security Checks	high
99611	Fedora 25 : backintime (2017-8dce7a3940)	Nessus	Fedora Local Security Checks	high
99610	Fedora 24 : backintime (2017-7c9a9b2b36)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-7572

high

Tenable Plugins

high

high

high

high