Advisories · Technology
PackageKit.
Every CVE that names PackageKit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
PackageKit ZYpp rollback vulnerability
- PackageKit
- CWE-1328
- CVSS 8.5 High
PackageKit/ZYpp local privilege escalation using InstallFiles(SIMULATE)
- PackageKit
- Path traversal
- CVSS 5.3 Medium
PackageKit API pk-transaction.c g_file_test improper authorization
- PackageKit
- Privilege escalation
- Broken access control
- CVSS 8.8 High
PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root
- PackageKit
- Race condition
-
Information disclosure in PackageKit
- PackageKit
- Information disclosure
- CVSS 8.2 High
Packagekit's apt backend lets user install untrusted local packages
- packagekit
- Privilege escalation
- CVSS 3.3 Low
PackageKit error messages leak presence and mimetype of files to unprivileged users
- PackageKit
- Information disclosure
-
packagekit: PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed…
- packagekit