Ubuntu Kylin Software Center vulnerability
Published: Thu, 11 Jun 2026 15:20
Summary
Ubuntu Kylin Software Center could be made to run programs as an administrator if it received specially crafted input via its D-Bus service.
Details
It was discovered that Ubuntu Kylin Software Center incorrectly handled user-supplied input in its D-Bus service. A local attacker could possibly use this issue to gain administrative privileges.
Recommended actions per Ubuntu release
StackPatch playbook auto-generated per release codename and per affected package.
Ubuntu resolute
ubuntu-kylin-software-center→4.5.77.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 4.5.77.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y ubuntu-kylin-software-center
Most apt upgrades restart their service automatically. needrestart lists anything else.
ubuntu-kylin-software-center→4.5.77.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 4.5.77.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y ubuntu-kylin-software-center
Most apt upgrades restart their service automatically. needrestart lists anything else.
Are YOU affected by USN-8424-1?
5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8424-1 (and any other live CVE) applies. Anonymous, no signup.
curl https://mindsparkstack.com/scan.sh | bash
References
StackPatch runs this match against YOUR installed packages every hour
Free 1-server / $99 lifetime founder seat (50 only) / $19+/mo monthly. Indie pricing.