RHSA-2022:0274: Important: polkit security update
The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.<br>Security Fix(es):<br><li> polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector (CVE-2021-4034)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:0274?
RHSA-2022:0274 has been classified as a critical security vulnerability.
How do I fix RHSA-2022:0274?
To fix RHSA-2022:0274, update the polkit package to version 0.112-26.el7_9.1 or later.
What systems are affected by RHSA-2022:0274?
RHSA-2022:0274 affects systems running versions of the polkit package prior to 0.112-26.el7_9.1.
Can RHSA-2022:0274 result in privilege escalation?
Yes, RHSA-2022:0274 can lead to local privilege escalation if exploited.
Is there a need for a system reboot after applying the RHSA-2022:0274 fix?
Generally, a reboot is not required after applying the fix for RHSA-2022:0274, but it is good practice to verify system stability.