Skip to content
OpenAdvisories
Unscored USN-8195-2 0 CVEs

packagekit vulnerability

Published Apr 27, 2026 · Updated May 20, 2026

Summary

USN-8195-1 fixed a vulnerability in PackageKit. This update provides the
corresponding update to Ubuntu 26.04 LTS.

Original advisory details:

It was discovered that PackageKit incorrectly handled certain
transactions. A local attacker could use this issue to install arbitrary
packages as root, possibly resulting in privilege escalation.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 26.04 LTS 26.04:LTS packagekit 1.3.4-3ubuntu1

References

  • report
    https://launchpad.net/bugs/2149908