UbuntuUpdates.org

Package "ubuntu-kylin-software-center"

Name: ubuntu-kylin-software-center

Description:

Software maintenance management tools
Latest version: 4.5.77.1ubuntu0.1
Release: resolute (26.04)
Level: updates
Repository: universe
Homepage: https://github.com/ubuntukylin/ubuntu-kylin-software-center

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ubuntu-kylin-software-center"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "ubuntu-kylin-software-center" in Resolute

Repository Area Version
base universe 4.5.77.1build1
security universe 4.5.77.1ubuntu0.1

Changelog

Version: 4.5.77.1ubuntu0.1 2026-06-11 20:07:35 UTC

  ubuntu-kylin-software-center (4.5.77.1ubuntu0.1) resolute-security; urgency=low

  [ Pan Zhang ]
  * SECURITY UPDATE: root privilege escalation via command injection in
    D-Bus method copy_file_to_install (LP: #2154543)
    - kylin_software_center_daemon/apt_dbus_service.py: add signature
      verification to copy_file_to_install D-Bus method to prevent
      unprivileged users from exploiting command injection in os.system()
      to gain root privileges.
    - service/dbus_service.py: pass signature data when calling
      copy_file_to_install via D-Bus interface.

 -- zhangpan <email address hidden> Tue, 09 Jun 2026 11:16:31 +0800
2154543 [Security] ubuntu-kylin-software-center: root privilege escalation via command injection in D-Bus method copy_file_to_install


About   -   Send Feedback to @ubuntu_updates