CVE-2026-95518: TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus Package Installer
Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions.
This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Pardus Package Installerto a version that resolves this vulnerability.Fixed in 0.7.1
Event History
Frequently Asked Questions
Which installations are affected?
Pardus Package Installer versions 0.7.0 through versions before 0.7.1 are affected. Version 0.7.1 is not listed as affected.
What is the practical impact of this issue?
The vulnerability is a time-of-check time-of-use race condition. It may allow an attacker to exploit a change in state between a security check and the subsequent use of the checked resource.