Stay Secure with the Latest Linux Advisories

security advisoryhigh severitysecurity issue

Mageia: 2021-0457 Critical: SystemD User Privilege Escalation Vulnerability

A flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkit_system_bus_name_get_creds_sync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process (CVE-2021-3560). References: - https://bugs.mageia.org/show_bug.cgi?id=29076 - https://access.redhat.com/errata/RHSA-2021:2238 . MGASA-2021-0244 - Updated polkit packages fix a security vulnerability Publication date: 08 Jun 2021 URL: https://advisories.mageia.org/MGASA-2021-0244.html Type: security Affected Mageia releases: 7, 8 CVE: CVE-2021-3560 A flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkit_system_bus_name_get_creds_sync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process (CVE-2021-3560). References: - https://bugs.mageia.org/show_bug.cgi?id=29076 - https://access.redhat.com/errata/RHSA-2021:2238 - https://www.cve.org/CVERecord?id=CVE-2021-3560 SRPMS: - 8/core/polkit-0.118-1.1.mga8 - 7/core/polkit-0.116-1.1.mga7 . Revised polkit packages rectify a vulnerability affecting process permissions in Mageia. Release date: 08 Jun 2021.. Mageia Security Update, Polkit Vulnerability, Process Privileges, Mageia Advisory. . Severity: Critical. LinuxSecurity.com Team

Jun 08, 2021 •Critical Mageia