Public bug reported: A new release of policykit-1 is available for merging from Debian.
Ubuntu: 127-3ubuntu1 Debian Unstable: 128-1 ### New Debian Changes ### policykit-1 (128-1) unstable; urgency=medium [ Andreas Henriksson ] * Only build-dep selinux on linux-any * Add patch to fix build on hurd (ucred) [ Luca Boccassi ] * Update upstream source from tag 'upstream/128' * Drop all patches following new release * Bump Standards-Version to 4.7.4 * Switch to dh-compat 14 * Install new manpage -- Luca Boccassi <[email protected]> Thu, 15 Oct 2026 16:37:58 +0100 ### Old Ubuntu Delta ### policykit-1 (127-3ubuntu1) stonking; urgency=medium * SECURITY UPDATE: stack underflow in cookie input - debian/patches/CVE-2026-85498.patch: Unsanitized underflow in cookie input in src/polkitagent/polkitagenthelperprivate.c. - CVE-2026-85498 -- Marc Deslauriers <[email protected]> Fri, 11 Sep 2026 13:29:14 -0400 ** Affects: policykit-1 (Ubuntu) Importance: Wishlist Status: New ** Tags: dcr-merge ** Changed in: policykit-1 (Ubuntu) Importance: Undecided => Wishlist ** Changed in: policykit-1 (Ubuntu) Milestone: None => ubuntu-26.11 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2171245 Title: Merge policykit-1 128-1 from Debian for tenacious cycle To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/2171245/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
