Ubuntu alert USN-8424-1 (ubuntu-kylin-software-center)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8424-1] Ubuntu Kylin Software Center vulnerability
Date:
             
 
Thu, 11 Jun 2026 16:41:28 +0000
Message-ID:
             
 
<E1wXiTA-0006im-Gz@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8424-1
June 11, 2026

ubuntu-kylin-software-center vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS

Summary:

Ubuntu Kylin Software Center could be made to run programs as an
administrator if it received specially crafted input via its D-Bus service.

Software Description:
- ubuntu-kylin-software-center: Software maintenance management tools

Details:

It was discovered that Ubuntu Kylin Software Center incorrectly
handled user-supplied input in its D-Bus service. A local attacker
could possibly use this issue to gain administrative privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  ubuntu-kylin-software-center    4.5.77.1ubuntu0.1

In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-8424-1
  https://launchpad.net/bugs/2154543

Package Information:
  https://launchpad.net/ubuntu/+source/ubuntu-kylin-softwar...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=MIQr
-----END PGP SIGNATURE-----