Major Linux PolicyKit Security Vulnerability Uncovered: Pwnkit

[JerryMungo]

.

 

[RonSwanson]

Temporary workaround:
sudo chmod 0755 /usr/bin/pkexec

 

[Jet-Fighter7700]

nice thing about linux is things like this get picked up, patched and everybody moves on with their lives.
due to the open source nature of the O/S, where anybody can find and fix issues

 

[pinball wizard]

nice thing about linux is things like this get picked up, patched and everybody moves on with their lives.
due to the open source nature of the O/S, where anybody can find and fix issues

Although it is a bit concerning that for 13 years no one picked this one up.

 

[Jet-Fighter7700]

Although it is a bit concerning that for 13 years no one picked this one up.

but then again isnt Linux a hodgepodge of people adding bits to it ?
and whatever works best is adopted by the bigger community to make the whole thing work better.

so some deep vulnerability can lie dormant for Decades without anybody picking it up,
I mean its nearly impossible to write Perfect code, their will always be something that gets picked up.

 

[Peon]

Although it is a bit concerning that for 13 years no one picked this one up.

I'n sure intelligence agencies picked it up at the beginning and kept quiet.

 

[oldBastard]

Patch is out for Ubuntu.

 

[RonSwanson]

Although it is a bit concerning that for 13 years no one picked this one up.

...and equally concerning that people run X on Linux and then expect security.