KPMCore: Root privilege escalation

KPMCore: Root privilege escalation A vulnerability in kpmcore could result in privilege escalation. kpmcore 2020-11-03 2020-11-03 749822 local 4.2.0 4.2.0

KPMcore, the KDE Partition Manager core, is a library for examining and modifying partitions, disk devices, and filesystems on a Linux system. It provides a unified programming interface over top of (external) system-manipulation tools.

Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab.

An attacker could esclate privileges to root by exploiting this vulnerability.

There is no known workaround at this time.

All KPMCore users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=sys-libs/kpmcore-4.2.0"

CVE-2020-27187 Upstream advisory sam_c sam_c