Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)
Hi there Is there any update in sight? https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Regards Frank
Am 26.01.22 um 11:14 schrieb Frank Krüger:
Hi there
Is there any update in sight?
https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
Regards Frank It's on its way: https://bugzilla.opensuse.org/show_bug.cgi?id=1194568
Sorry for the noise. Regards Frank
Appears to be on its way: https://bugzilla.opensuse.org/show_bug.cgi?id=CVE-2021-4034 On 1/26/22 10:14, Frank Krüger wrote:
Hi there
Is there any update in sight?
https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
Regards Frank
Hi, ah for Factory... there I also submitted it. Ciao, Marcus On Wed, Jan 26, 2022 at 10:23:12AM +0000, zaggynl wrote:
Appears to be on its way:
https://bugzilla.opensuse.org/show_bug.cgi?id=CVE-2021-4034
On 1/26/22 10:14, Frank Krüger wrote:
Hi there
Is there any update in sight?
https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
Regards Frank
On Wed, Jan 26, 2022 at 11:14:23AM +0100, Frank Krüger wrote:
Hi there
Is there any update in sight?
should be available already via zypper patch. Ciao, Marcus
Am Mittwoch, 26. Januar 2022, 12:46:27 CET schrieb Marcus Meissner:
On Wed, Jan 26, 2022 at 11:14:23AM +0100, Frank Krüger wrote:
Hi there
Is there any update in sight?
should be available already via zypper patch.
Ciao, Marcus
didn't show as a patch on TW, but I got it with zypper up. cheers MH -- Mathias Homann Mathias.Homann@openSUSE.org OBS: lemmy04 Jabber (XMPP): lemmy@tuxonline.tech Matrix: @mathias:eregion.de IRC: [Lemmy] on liberachat and ircnet (bouncer active) keybase: https://keybase.io/lemmy gpg key fingerprint: 8029 2240 F4DD 7776 E7D2 C042 6B8E 029E 13F2 C102
On Wed, Jan 26, 2022 at 7:21 AM Frank Krüger <fkrueger@mailbox.org> wrote:
Hi there
Is there any update in sight?
The polkit part is already fixed.. bikeshedding and language lawyering rages on about fixing the actual bug which is a kernel issue. https://lwn.net/SubscriberLink/882799/7510d64465c89935/ At least there seems to be consensus on returning EINVAL on the libc syscall wrappers on this case even if the kernel is not changed.
participants (6)
-
Carlos E. R.
-
Cristian Rodríguez
-
Frank Krüger
-
Marcus Meissner
-
Mathias Homann
-
zaggynl