PolicyKit: Multiple vulnerabilities

PolicyKit: Multiple vulnerabilities Multiple vulnerabilities have been found in PolicyKit, the worst of which may allow a local attacker to gain root privileges. polkit April 17, 2012 April 17, 2012: 1 314535 364973 401513 local 0.104-r1 0.104-r1

PolicyKit is a toolkit for controlling privileges for system-wide services.

Multiple vulnerabilities have been found in PolicyKit:

Error messages in the pkexec utility disclose the existence of local files (CVE-2010-0750).
The pkexec utility initially checks the effective user ID of its parent process for authorization, instead of checking the real user ID (CVE-2011-1485).
Members of the "wheel" group are able to execute commands as an administrator without a password (CVE-2011-4945).

A local attacker could gain elevated privileges or sensitive information.

There is no known workaround at this time.

All PolicyKit users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=sys-auth/polkit-0.104-r1"

CVE-2010-0750 CVE-2011-1485 CVE-2011-4945 underling ackle