oss-security - Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 25 Jan 2022 18:04:49 +0000
From: Sam James <sam@...too.org>
To: oss-security@...ts.openwall.com
Subject: Re: pwnkit: Local Privilege Escalation in polkit's
 pkexec (CVE-2021-4034)



> On 25 Jan 2022, at 17:57, Qualys Security Advisory <qsa@...lys.com> wrote:
> 
> 
> Qualys Security Advisory
> pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)
> [snip]

Hi,

For the benefit of downstreams: patch is available in gitlab [0]
but no release yet.

[0] https://gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683

Best,
sam

Download attachment "signature.asc" of type "application/pgp-signature" (619 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.