Security update for polkit SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:0190-1 Final 1 1 2022-01-25T18:10:19Z current 2022-01-25T18:10:19Z 2022-01-25T18:10:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for polkit This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-SLE-15.3-2022-190 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SGEROI6PUOTOXKFIH2MPKUQ3PI6VWLXQ/ E-Mail link for openSUSE-SU-2022:0190-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1194568 SUSE Bug 1194568 https://www.suse.com/security/cve/CVE-2021-4034/ SUSE CVE CVE-2021-4034 page openSUSE Leap 15.3 libpolkit0-0.116-3.6.1 libpolkit0-32bit-0.116-3.6.1 polkit-0.116-3.6.1 polkit-devel-0.116-3.6.1 polkit-doc-0.116-3.6.1 typelib-1_0-Polkit-1_0-0.116-3.6.1 libpolkit0-0.116-3.6.1 as a component of openSUSE Leap 15.3 libpolkit0-32bit-0.116-3.6.1 as a component of openSUSE Leap 15.3 polkit-0.116-3.6.1 as a component of openSUSE Leap 15.3 polkit-devel-0.116-3.6.1 as a component of openSUSE Leap 15.3 polkit-doc-0.116-3.6.1 as a component of openSUSE Leap 15.3 typelib-1_0-Polkit-1_0-0.116-3.6.1 as a component of openSUSE Leap 15.3 A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine. CVE-2021-4034 openSUSE Leap 15.3:libpolkit0-0.116-3.6.1 openSUSE Leap 15.3:libpolkit0-32bit-0.116-3.6.1 openSUSE Leap 15.3:polkit-0.116-3.6.1 openSUSE Leap 15.3:polkit-devel-0.116-3.6.1 openSUSE Leap 15.3:polkit-doc-0.116-3.6.1 openSUSE Leap 15.3:typelib-1_0-Polkit-1_0-0.116-3.6.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SGEROI6PUOTOXKFIH2MPKUQ3PI6VWLXQ/ https://www.suse.com/security/cve/CVE-2021-4034.html CVE-2021-4034 https://bugzilla.suse.com/1194568 SUSE Bug 1194568 https://bugzilla.suse.com/1195125 SUSE Bug 1195125 https://bugzilla.suse.com/1195136 SUSE Bug 1195136 https://bugzilla.suse.com/1195246 SUSE Bug 1195246 https://bugzilla.suse.com/1195265 SUSE Bug 1195265 https://bugzilla.suse.com/1195278 SUSE Bug 1195278 https://bugzilla.suse.com/1195528 SUSE Bug 1195528 https://bugzilla.suse.com/1195541 SUSE Bug 1195541 https://bugzilla.suse.com/1196165 SUSE Bug 1196165 https://bugzilla.suse.com/1196388 SUSE Bug 1196388