| Bug | wheezy | jessie | stretch | buster | sid | Description |
|---|
| CVE-2016-2568 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | vulnerable | pkexec, when used with --user nonpriv, allows local users to escape to ... |
| CVE-2015-4625 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Integer overflow in the authentication_agent_new_cookie function in ... |
| CVE-2015-3255 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | The polkit_backend_action_pool_init function in ... |
| CVE-2015-3218 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | The authentication_agent_new function in ... |
| CVE-2013-4288 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Race condition in PolicyKit (aka polkit) allows local users to bypass ... |