USN-8195-2
packagekit vulnerability
USN-8195-1 fixed a vulnerability in PackageKit. This update provides the corresponding update to Ubuntu 26.04 LTS.
Original advisory details:
It was discovered that PackageKit incorrectly handled certain transactions. A local attacker could use this issue to install arbitrary packages as root, possibly resulting in privilege escalation.
What each source reports
OSV No score
packagekit vulnerability
USN-8195-1 fixed a vulnerability in PackageKit. This update provides the corresponding update to Ubuntu 26.04 LTS.
Original advisory details:
It was discovered that PackageKit incorrectly handled certain transactions. A local attacker could use this issue to install arbitrary packages as root, possibly resulting in privilege escalation.
- Record
USN-8195-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
packagekitUbuntu:26.04:LTS |
before 1.3.4-3ubuntu1, plus listed versions 1.3.1-11.3.2-11.3.3-11.3.4-11.3.4-3 |
1.3.4-3ubuntu1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8195-2 is a vulnerability with no CVSS score yet in packagekit, published April 27, 2026. No source lists public exploit code. Fixed in packagekit 1.3.4-3ubuntu1.