Most recent entries from all

certfr-2026-avi-1385 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

2026-10-30T06:58:08.711177+00:00

certfr-2026-avi-1385

GHSA-cvc4-pw4g-cgpc

2026-10-30T06:58:08.711298+00:00

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigger this flaw, potentially causing an application crash and resulting in a Denial of Service (DoS).

OESA-2026-4000 — polkit security update

2026-10-30T06:58:08.711353+00:00

Affected: openEuler:20.03-LTS-SP4: polkit

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fix(es):

A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)

openSUSE-SU-2026:12203-1 — libpolkit-agent-1-0-128-1.1 on GA media

2026-10-30T06:58:08.711400+00:00

libpolkit-agent-1-0-128-1.1 on GA media

RHSA-2026:66287 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

2026-10-30T06:58:08.711432+00:00

polkit: Polkit: Denial of Service via unbounded input processing through standard input polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow

UBUNTU-CVE-2026-85498

2026-10-30T06:58:08.711464+00:00

Affected: Ubuntu:Pro:14.04:LTS: policykit-1, Ubuntu:Pro:16.04:LTS: policykit-1, Ubuntu:18.04:LTS: policykit-1, Ubuntu:20.04:LTS: policykit-1, Ubuntu:22.04:LTS: policykit-1, Ubuntu:24.04:LTS: policykit-1, Ubuntu:26.04:LTS: policykit-1

[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]