fix: CVE-2026-10294 - Do not accept symlinks as frontend socket#6
fix: CVE-2026-10294 - Do not accept symlinks as frontend socket#6deepin-ci-robot wants to merge 1 commit into
Conversation
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
TAG Bot TAG: 1.2.8-2deepin3 |
3ae090a to
b377735
Compare
If a debconf frontend socket is passed, we now ensure that it isn't a symlink and is a socket, instead of following it and revealing that the symlink exists. This prevents unprivileged users from probing the existence of arbitrary files on the system via the SetHints frontend-socket argument. Upstream: PackageKit/PackageKit@4c1994d Generated-By: deepin-ci-robot Co-Authored-By: hudeng <hudeng@deepin.org>
b377735 to
0c61964
Compare
|
/integrate |
|
AutoIntegrationPr Bot |
|
TAG Bot New tag: 1.2.8-2deepin3 |
3 participants
CVE 修复
CVE ID: CVE-2026-10294
漏洞描述: A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
修复方案: Backport upstream fix commit 4c1994d0545d which replaces g_file_test() with g_lstat()+S_ISSOCK() to avoid following symlinks (which would let callers probe arbitrary paths as root), and adds proper socket type checking.
受影响版本: PackageKit up to 1.3.5
当前版本: 1.2.8-2deepin2
验证状态: Patch applies cleanly, no conflicts with existing patches.
Fix-Approach: backport-upstream
Generated by: CVE-Fixer Agent
Co-Authored-By: hudeng hudeng@deepin.org