[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-026-4897/policykit-1 via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Apr 27 18:26:58 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4962a179 by Salvatore Bonaccorso at 2026-04-27T19:26:26+02:00
Track fixed version for CVE-026-4897/policykit-1 via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -16016,7 +16016,7 @@ CVE-2026-4923 (Impact: When using multiple wildcards, combined with at least on
NOTE: https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-27v5-c462-wpq7
NOTE: Fixed by: https://github.com/pillarjs/path-to-regexp/commit/48646547da685c1ccb76a95fe23373975a91e200 (v8.4.0)
CVE-2026-4897 (A flaw was found in polkit. A local user can exploit this by providing ...)
- - policykit-1 <unfixed> (bug #1132234)
+ - policykit-1 127-3 (bug #1132234)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2451739
NOTE: Fixed by: https://github.com/polkit-org/polkit/commit/7e122c8a5120c2aae2d9d44a26796dc18f5b677c
NOTE: Introduced with (part of the fixes for CVE-2015-4625):
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4962a179c1760071db22e2ada1927a390a30f340
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4962a179c1760071db22e2ada1927a390a30f340
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260427/38c72f94/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list