[Git][security-tracker-team/security-tracker][master] Update information for CVE-2026-85498/policykit-1

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
11685dfa by Salvatore Bonaccorso at 2026-10-04T21:08:43+02:00
Update information for CVE-2026-85498/policykit-1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -39127,8 +39127,10 @@ CVE-2026-85498 [Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack b
 	- policykit-1 <unfixed>
 	[trixie] - policykit-1 <not-affected> (Fix for CVE-2026-4897 not applied)
 	[bookworm] - policykit-1 <not-affected> (Fix for CVE-2026-4897 not applied)
+	NOTE: https://github.com/polkit-org/polkit/pull/702
 	NOTE: Introduced with: https://github.com/polkit-org/polkit/commit/7e122c8a5120c2aae2d9d44a26796dc18f5b677c
 	NOTE: The fix for CVE-2026-4897 introduces th new stack buffer underflow issue.
+	NOTE: Fixed by: https://github.com/polkit-org/polkit/commit/eea172967848bb4c5a407329f40c0e45de0d187e
 CVE-2026-XXXX [tryton-server: Python code execution via uploaded templates]
 	- tryton-server 7.0.53-1
 	[trixie] - tryton-server 7.0.30-1+deb13u2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11685dfaaa68b7a6bcc25e44ba3935ac3326dbe7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11685dfaaa68b7a6bcc25e44ba3935ac3326dbe7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261004/48a66f65/attachment.htm>