ALT-PU-2025-4899-1
Package packagekit updated to version 1.3.0-alt2 for branch sisyphus_e2k.
Closed vulnerabilities
Published: 2024-01-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2024-0217
A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.
Severity: LOW (3.3)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
References:
- https://access.redhat.com/security/cve/CVE-2024-0217
- https://access.redhat.com/security/cve/CVE-2024-0217
- RHBZ#2256624
- RHBZ#2256624
- https://github.com/PackageKit/PackageKit/commit/64278c9127e3333342b56ead99556161f7e86f79
- https://github.com/PackageKit/PackageKit/commit/64278c9127e3333342b56ead99556161f7e86f79
Closed bugs
Ошибка сегментирования при установке/удалении пакета через pkcon
pkmon: finalized without ever returning