{"id":"USN-8195-2","aliases":[],"status":"published","title":"packagekit vulnerability","description":"USN-8195-1 fixed a vulnerability in PackageKit. This update provides the\ncorresponding update to Ubuntu 26.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that PackageKit incorrectly handled certain\n transactions. A local attacker could use this issue to install arbitrary\n packages as root, possibly resulting in privilege escalation.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-04-27T11:28:19Z","modified":"2026-05-20T16:04:01Z","fixes":[{"ecosystem":"Ubuntu:26.04:LTS","package":"packagekit","fixed_in":["1.3.4-3ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-3ubuntu1"}]}],"versions":["1.3.1-1","1.3.2-1","1.3.3-1","1.3.4-1","1.3.4-3"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-8195-2","tags":["advisory"]},{"url":"https://launchpad.net/bugs/2149908","tags":["report"]}],"sources":{"osv":[{"id":"USN-8195-2","title":"packagekit vulnerability","description":"USN-8195-1 fixed a vulnerability in PackageKit. This update provides the\ncorresponding update to Ubuntu 26.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that PackageKit incorrectly handled certain\n transactions. A local attacker could use this issue to install arbitrary\n packages as root, possibly resulting in privilege escalation.","status":"published","published":"2026-04-27T11:28:19Z","modified":"2026-05-20T16:04:01.096896414Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}