Amazon Linux 2022 : polkit, polkit-devel, polkit-libs (ALAS2022-2022-016)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-016 advisory. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users accordin...

MGASA-2022-0037 Updated polkit packages fix security vulnerability

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...