packagekit (1.1.5-2+deb9u1) stretch-security; urgency=high * Add 02_dont-set-just_reinstall-on-auth-failure.patch - Resolves an authentication bypass flaw allowing users without privileges to install local packages. (Closes: #896703, CVE-2018-1106) -- Matthias Klumpp <email address hidden> Fri, 04 May 2018 10:46:18 +0200