Mageia alert MGASA-2022-0037 (polkit)

From:
             
 
Mageia Updates <buildsystem-daemon@mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2022-0037: Updated polkit packages fix security vulnerability
Date:
             
 
Wed, 26 Jan 2022 11:31:06 +0100
Message-ID:
             
 
<20220126103106.C1CAF9FD0F@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2022-0037 - Updated polkit packages fix security vulnerability

Publication date: 26 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0037.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2021-4034

Description:
A local privilege escalation vulnerability was found on polkit's pkexec
utility. The pkexec application is a setuid tool designed to allow unprivileged
users to run commands as privileged users according predefined policies. The
current version of pkexec doesn't handle the calling parameters count correctly
and ends trying to execute environment variables as commands. An attacker can
leverage this by crafting environment variables in such a way it'll induce
pkexec to execute arbitrary code. When successfully executed the attack can
cause a local privilege escalation given unprivileged users administrative
rights on the target machine (CVE-2021-4034).

References:
- https://bugs.mageia.org/show_bug.cgi?id=29944
- https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
- https://access.redhat.com/errata/RHSA-2022:0267
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4034

SRPMS:
- 8/core/polkit-0.118-1.2.mga8