Root privilege escalation via unsafe setuid permission changes

Privilege escalation in MariaDB 10.4.7 through 10.4.11 allows local users with mysql access to gain root privileges through mysql_install_db. The script makes auth_pam_tool_dir writable by mysql and then unconditionally gives root ownership and mode 04755 to a replaceable auth_pam_tool path. A compromised mysql account must await automatic or administrator-triggered script execution; the selected file then becomes a setuid-root binary.