Ubuntu alert USN-8195-2 (packagekit)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8195-2] PackageKit vulnerability
Date:
             
 
Mon, 27 Apr 2026 13:37:47 +0000
Message-ID:
             
 
<E1wHM9j-0003Pe-4b@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8195-2
April 27, 2026

packagekit vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:


Summary:

PackageKit could be made to install packages as the administrator.

Software Description:

Details:

USN-8195-1 fixed a vulnerability in PackageKit. This update provides the
corresponding update to Ubuntu 26.04 LTS.

Original advisory details:

 It was discovered that PackageKit incorrectly handled certain
 transactions. A local attacker could use this issue to install arbitrary
 packages as root, possibly resulting in privilege escalation.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8195-2
  https://ubuntu.com/security/notices/USN-8195-1
  https://launchpad.net/bugs/2149908


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=muj3
-----END PGP SIGNATURE-----