MGASA-2022-0037 - Updated polkit packages fix security vulnerability

Publication date: 26 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0037.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec
utility. The pkexec application is a setuid tool designed to allow unprivileged
users to run commands as privileged users according predefined policies. The
current version of pkexec doesn't handle the calling parameters count correctly
and ends trying to execute environment variables as commands. An attacker can
leverage this by crafting environment variables in such a way it'll induce
pkexec to execute arbitrary code. When successfully executed the attack can
cause a local privilege escalation given unprivileged users administrative
rights on the target machine (CVE-2021-4034).

References:
- https://bugs.mageia.org/show_bug.cgi?id=29944
- https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
- https://access.redhat.com/errata/RHSA-2022:0267
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4034

SRPMS:
- 8/core/polkit-0.118-1.2.mga8