501 matches found
CVE-2026-41651-Python
Pack2TheRoot: CVE-2026-41651 Python PackageKit TOCTOU ローカル特権昇格エクスプロイトの Python PoC。 ローカルの非特権ユーザーは、認証なしで任意のパッケージを root としてインストールできます。 フィールド| 値 ---|--- CVE| CVE-2026-41651 コンポーネント| PackageKit デーモン packagekitd 影響を受けるバージョン| 1.0.2 – 1.3.4 修正バージョン| 1.3.5 影響| ローカル特権昇格 → root 免責事項...
OPENSUSE-SU-2026:11855-1 PackageKit-1.4.0-1.1 on GA media
These are all security issues fixed in the PackageKit-1.4.0-1.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the RepoRemove() function in the PackageKit package manager allows a attacker to compromise the integrity and accessibility of the protected information.
The vulnerability of the RepoRemove function in the PackageKit package manager is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
MGASA-2026-0411 Updated packagekit packages fix a security vulnerability
PackageKit API pk-transaction.c gfiletest improper authorization. CVE-2026-10294...
Updated packagekit packages fix a security vulnerability
PackageKit API pk-transaction.c gfiletest improper authorization. CVE-2026-10294...
DEBIAN-CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
UBUNTU-CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
EUVD-2026-78063
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-19816 PackageKit: dnf5 backend ignores SIMULATE on RepoRemove
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-19816 PackageKit: dnf5 backend ignores SIMULATE on RepoRemove
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-19816
CVE-2026-19816 affects PackageKit when used with the dnf5 backend. PackageKit normally skips the polkit authorization check for transactions flagged as SIMULATE (dry-run), but the RepoRemove handler in the dnf5 backend contains a faulty guard—(role == REPO_REMOVE || !SIMULATE)—which is always tru...
CVE-2026-19816 PackageKit: dnf5 backend ignores SIMULATE on RepoRemove
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
Astra Linux – Vulnerability in PackageKit
PackageKit provided detailed error messages to unprivileged callers who were exposed to information about the presence of files and their mimetypes. This information was difficult for those callers to determine on their own...
Astra Linux – Vulnerability in PackageKit
PackageKit’s apt backend mistakenly treats all local deb files as trustworthy. The apt security model is based on repository trust, not the contents of individual files. On sites where PolicyKit rules are configured, this could allow users to install malicious packages...
PT-2026-91454
Name of the Vulnerable Software and Affected Versions PackageKit affected versions not specified Description An authorization flaw exists in PackageKit when using the dnf5 backend. The system skips the polkit authorization check for transactions that include the SIMULATE dry-run flag. However, th...
CVE-2026-19816: Incorrect Authorization
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
