Skip to main content

Search: #PackageKit

OKHK 👀
OKHK 👀
✨ Thinking ❤️

  1. 🔴 PackageKit 本地提权漏洞；请尽快升级至 1.3.5。

    - 修复版本 1.3.5 在约两小时前发布。
    - PackageKit 是许多包管理器的后端，在 Ubuntu、Debian、Fedora 等发行版上被广泛应用；最早受影响版本 1.0.2 版本在 12 年前发布。
    - 鉴于以上情况，目前大部分正在运行的 Linux 系统都受此漏洞影响，建议系统管理员在更新版本于发行版发布后及时更新。

    CVSS: 8.8/10
    Affect: [1.0.2, 1.3.4]

    - GHSA-f55j-vvr9-69xv
    - github.security.telekom.com/~

    linksrc: https://t.me/bupt_moe/2712

    #Security #PackageKit
    GitHub
    Race condition vulnerability leads to arbitrary package installation as root
    Race condition vulnerability leads to arbitrary package installation as root
    This report explains a vulnerability within PackageKit, that allows unprivileged user installing packages as root and thus leads to a local privilege escalation.

    All PackageKit versions between ...
OKHK