Summary
USN-5252-1 fixed a vulnerability in policykit-1. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that the PolicyKit pkexec tool incorrectly handled
command-line arguments. A local attacker could use this issue to escalate
privileges to an administrator.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | policykit-1 | 0.105-4ubuntu3.14.04.6+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | policykit-1 | 0.105-14.1ubuntu0.5+esm1 |
Vulnerabilities 1
-
High 7.8
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…
KEV Jun 27, 2022
References
-
report
https://ubuntu.com/security/CVE-2021-4034