Skip to content
OpenAdvisories

Package · Ubuntu

dnf5

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2026-111253

    Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved transaction

    A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that the caller is the unique sender that created the session. A local attacker can modify another user's live package-management session and re…

    Red Hat Red Hat Hardened Images dnf5 dnf5 Debian Ubuntu