Summary
It was discovered that PackageKit incorrectly handled certain transactions.
A local attacker could use this issue to install arbitrary packages as
root, possibly resulting in privilege escalation.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | packagekit | 1.2.5-2ubuntu3.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | packagekit | 1.2.8-2ubuntu1.5 |
| Ubuntu · 25.10 | packagekit | 1.3.1-1ubuntu1.1 |
References
-
report
https://launchpad.net/bugs/2149908