Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-1106 →

DEBIAN-CVE-2018-1106

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 packagekit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10-1"}]}]

Debian:13 packagekit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10-1"}]}]

Debian:14 packagekit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10-1"}]}]

Références

advisory security-tracker.debian.org