This Week in Security: Geopolitical Hacktivism, Antivirus Mining, and Linux Malware

#hackadaycolumns #news #securityhacks #cryptominer #pwnkit #thisweekinsecurity #hackaday
posted by pod_feeder_v2

Ich halte fest: Beim Schließen der Sicherheitslücke #CVE-2021-4034 #PwnKit war diesmal #SUSE schneller als #RedHat.

#SLES 15.x habe ich gestern morgen gepatched, für #CentOS (Stream) und #Fedora kam der Patch erst heute morgen.

#Polkit #security

#Linux #Server #Problem - #pwnkit: Local Privilege Escalation in #polkit's #pkexec

We discovered a Local Privilege #Escalation (from any user to root) in polkit's pkexec, a SUID-root program that is installed by default on every major Linux #distribution ...

#Workaround if no #patch is available:

chmod 0755 /usr/bin/pkexec

#danger #warning #bug #software #news #root