folioci/alpine-jre-openjdk11 not affected by polkit (CVE-2021-4034)
Description
CSP Request Details
None
CSP Rejection Details
None
Potential Workaround
None
relates to
Checklist
hideTestRail: Results
Activity
Show:
Cannot Reproduce
Details
Details
Assignee
Unassigned
UnassignedReporter
Julian LadischLabels
Priority
TBDDevelopment Team
FOLIO DevOps
RCA Group
TBD
TestRail: Cases
Open TestRail: Cases
TestRail: Runs
Open TestRail: Runs
Created January 26, 2022 at 3:44 PM
Updated January 27, 2022 at 4:31 PM
Resolved January 26, 2022 at 4:00 PM
TestRail: Cases
TestRail: Runs
folioci/alpine-jre-openjdk11 = https://github.com/folio-org/folio-tools/blob/master/folio-java-docker/openjdk11/Dockerfile
Most FOLIO Java modules use this Docker image that is based on Alpine.
However, our image doesn't contain the polkit Alpine package.
Therefore it is not affected by this Local Privilege Escalation in polkit's pkexec:
https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
https://security.alpinelinux.org/srcpkg/polkit