{"id":"CVE-2024-0217","aliases":["EUVD-2024-16016","GHSA-g3jm-7w7w-rf6f","SUSE-RU-2024:1202-1","SUSE-SU-2024:0966-1","SUSE-SU-2024:1046-1","UBUNTU-CVE-2024-0217"],"status":"published","title":"Packagekitd: use-after-free in idle function callback","description":"A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00226,"percentile":0.13406,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2024-01-03T17:04:37Z","modified":"2026-11-06T13:41:04Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"libyui-ncurses-pkg","fixed_in":["2.50.8-150200.3.5.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"libyui-qt-pkg","fixed_in":["2.47.5-150200.3.4.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"yast2-pkg-bindings","fixed_in":["4.2.17-150200.3.24.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP3","package":"libyui-ncurses-pkg","fixed_in":["4.1.5-150300.3.10.19"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP3","package":"libyui-qt-pkg","fixed_in":["4.1.5-150300.3.10.17"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP3","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP3","package":"yast2-pkg-bindings","fixed_in":["4.3.13-150300.3.8.21"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"PackageKit","fixed_in":["1.1.13-150200.4.30.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"PackageKit-branding-SLE","fixed_in":["12.0-150200.9.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libyui","fixed_in":["3.9.3-150200.3.2.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libyui-ncurses-pkg","fixed_in":["2.50.8-150200.3.5.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libyui-qt-pkg","fixed_in":["2.47.5-150200.3.4.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libyui-rest-api","fixed_in":["0.3.0-150200.3.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"yast2-pkg-bindings","fixed_in":["4.2.17-150200.3.24.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"PackageKit","fixed_in":["1.1.13-150200.4.30.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"PackageKit-branding-SLE","fixed_in":["12.0-150200.9.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-ncurses","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-ncurses-pkg","fixed_in":["4.1.5-150300.3.10.19"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-ncurses-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-qt","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-qt-graph","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-qt-pkg","fixed_in":["4.1.5-150300.3.10.17"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-qt-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"yast2-pkg-bindings","fixed_in":["4.3.13-150300.3.8.21"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"PackageKit","fixed_in":["1.1.13-150200.4.30.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"PackageKit-branding-SLE","fixed_in":["12.0-150200.9.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libyui","fixed_in":["3.9.3-150200.3.2.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libyui-ncurses-pkg","fixed_in":["2.50.8-150200.3.5.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libyui-qt-pkg","fixed_in":["2.47.5-150200.3.4.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libyui-rest-api","fixed_in":["0.3.0-150200.3.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"yast2-pkg-bindings","fixed_in":["4.2.17-150200.3.24.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"PackageKit","fixed_in":["1.1.13-150200.4.30.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"PackageKit-branding-SLE","fixed_in":["12.0-150200.9.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-ncurses","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-ncurses-pkg","fixed_in":["4.1.5-150300.3.10.19"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-ncurses-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-qt","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-qt-graph","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-qt-pkg","fixed_in":["4.1.5-150300.3.10.17"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-qt-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"yast2-pkg-bindings","fixed_in":["4.3.13-150300.3.8.21"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"PackageKit","fixed_in":["1.1.13-150200.4.30.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"PackageKit-branding-SLE","fixed_in":["12.0-150200.9.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libyui","fixed_in":["3.9.3-150200.3.2.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libyui-ncurses-pkg","fixed_in":["2.50.8-150200.3.5.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libyui-qt-pkg","fixed_in":["2.47.5-150200.3.4.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libyui-rest-api","fixed_in":["0.3.0-150200.3.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"yast2-pkg-bindings","fixed_in":["4.2.17-150200.3.24.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"PackageKit","fixed_in":["1.1.13-150200.4.30.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"PackageKit-branding-SLE","fixed_in":["12.0-150200.9.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-ncurses","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-ncurses-pkg","fixed_in":["4.1.5-150300.3.10.19"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-ncurses-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-qt","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-qt-graph","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-qt-pkg","fixed_in":["4.1.5-150300.3.10.17"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-qt-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"yast2-pkg-bindings","fixed_in":["4.3.13-150300.3.8.21"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"PackageKit","fixed_in":["1.1.13-150200.4.30.4"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"PackageKit-branding-SLE","fixed_in":["12.0-150200.9.2.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-ncurses","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-ncurses-pkg","fixed_in":["4.1.5-150300.3.10.19"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-ncurses-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-qt","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-qt-graph","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-qt-pkg","fixed_in":["4.1.5-150300.3.10.17"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-qt-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-rest-api","fixed_in":["4.1.5-150300.3.10.5"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libzypp","fixed_in":["17.32.2-150200.92.3"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"yast2-pkg-bindings","fixed_in":["4.3.13-150300.3.8.21"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"zypper","fixed_in":["1.14.69-150200.73.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"PackageKit","fixed_in":["1.1.3-24.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"PackageKit","fixed_in":["1.1.3-24.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"PackageKit","fixed_in":["1.1.3-24.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"PackageKit","fixed_in":["1.1.3-24.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"PackageKit","fixed_in":["1.2.4-150400.3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"PackageKit","fixed_in":["1.2.4-150400.3.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"PackageKit","fixed_in":["1.2.4-150400.3.13.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.8-150200.3.5.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.47.5-150200.3.4.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP2","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.17-150200.3.24.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP3","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.19"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP3","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.17"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP3","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP3","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.13-150300.3.8.21"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-150200.4.30.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"PackageKit-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0-150200.9.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libyui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.3-150200.3.2.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.8-150200.3.5.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.47.5-150200.3.4.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libyui-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-150200.3.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.17-150200.3.24.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-150200.4.30.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"PackageKit-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0-150200.9.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.19"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-ncurses-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-qt-graph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.17"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-qt-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libyui-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.13-150300.3.8.21"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-150200.4.30.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"PackageKit-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0-150200.9.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libyui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.3-150200.3.2.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.8-150200.3.5.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.47.5-150200.3.4.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libyui-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-150200.3.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.17-150200.3.24.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-150200.4.30.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"PackageKit-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0-150200.9.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.19"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-ncurses-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-qt-graph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.17"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-qt-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libyui-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.13-150300.3.8.21"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-150200.4.30.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"PackageKit-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0-150200.9.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libyui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.3-150200.3.2.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.8-150200.3.5.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.47.5-150200.3.4.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libyui-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-150200.3.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.17-150200.3.24.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-150200.4.30.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"PackageKit-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0-150200.9.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.19"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-ncurses-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-qt-graph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.17"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-qt-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libyui-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.13-150300.3.8.21"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-150200.4.30.4"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"PackageKit-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0-150200.9.2.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-ncurses-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.19"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-ncurses-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-qt-graph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-qt-pkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.17"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-qt-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libyui-rest-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-150300.3.10.5"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libzypp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.32.2-150200.92.3"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"yast2-pkg-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.13-150300.3.8.21"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"zypper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.69-150200.73.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-24.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-24.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-24.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-24.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150400.3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150400.3.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150400.3.13.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.17-4ubuntu6~gcc5.3","0.8.17-4ubuntu6~gcc5.4ubuntu1","0.8.17-4ubuntu6~gcc5.4ubuntu1.1","0.8.17-4ubuntu6~gcc5.4ubuntu1.2","0.8.17-4ubuntu6~gcc5.4ubuntu1.3","0.8.17-4ubuntu6~gcc5.4ubuntu1.4","0.8.17-4ubuntu6~gcc5.4ubuntu1.5","0.8.17-4ubuntu6~gcc5.4ubuntu1.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.7-1","1.1.9-1","1.1.9-1ubuntu1","1.1.9-1ubuntu2","1.1.9-1ubuntu2.18.04.1","1.1.9-1ubuntu2.18.04.3","1.1.9-1ubuntu2.18.04.4","1.1.9-1ubuntu2.18.04.5","1.1.9-1ubuntu2.18.04.6","1.1.9-1ubuntu2.18.04.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.12-5ubuntu4","1.1.13-1","1.1.13-2","1.1.13-2build1","1.1.13-2ubuntu1","1.1.13-2ubuntu1.1","1.1.13-2ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.2-2ubuntu3","1.2.4-1ubuntu1","1.2.4-1ubuntu2","1.2.5-1ubuntu1","1.2.5-2ubuntu1","1.2.5-2ubuntu2","1.2.5-2ubuntu3","1.2.5-2ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.7-1","1.2.8-1","1.2.8-1build1","1.2.8-2","1.2.8-2build2","1.2.8-2build3","1.2.8-2ubuntu1","1.2.8-2ubuntu1.1","1.2.8-2ubuntu1.2","1.2.8-2ubuntu1.4","1.2.8-2ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.0-3build1","1.3.1-1","1.3.1-1ubuntu1","1.3.1-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.4-3","1.3.5-1","1.3.5-1ubuntu1","1.3.6-1","1.3.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-1","1.3.2-1","1.3.3-1","1.3.4-1","1.3.4-3","1.3.4-3ubuntu1","1.3.4-3ubuntu1.1","1.3.4-3ubuntu1.2"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"packagekit_project","product":"packagekit"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2024-0217","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Mitigation","Third Party Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256624","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://github.com/PackageKit/PackageKit/commit/64278c9127e3333342b56ead99556161f7e86f79","tags":["x_transferred","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0217","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g3jm-7w7w-rf6f"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0217.json","tags":["advisory"]},{"url":"https://github.com/PackageKit/PackageKit","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/-2024-1202/suse-ru-20241202-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175678","tags":["report"]},{"url":"https://bugzilla.suse.com/1218171","tags":["report"]},{"url":"https://bugzilla.suse.com/1218544","tags":["report"]},{"url":"https://bugzilla.suse.com/1221525","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0217","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240966-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241046-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0217","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-0217","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-0217","title":"Packagekitd: use-after-free in idle function callback","description":"A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.","status":"published","published":"2024-01-03T17:04:37.841Z","modified":"2026-11-06T13:41:04.418Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-06T14:58:28.173309Z"}],"euvd":[{"id":"EUVD-2024-16016","description":"A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.","status":"published","published":"2024-01-03T17:04:37Z","modified":"2026-11-06T13:41:04Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-06T15:05:10.688381Z"}],"ghsa":[{"id":"GHSA-g3jm-7w7w-rf6f","title":"A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup...","description":"A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.","status":"published","published":"2024-01-03T18:30:51Z","modified":"2024-01-25T18:30:51Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:55:29.01801Z"}],"nvd":[{"id":"CVE-2024-0217","description":"A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.","status":"published","published":"2024-01-03T17:15:12.11Z","modified":"2026-11-06T14:17:03.04Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-06T16:00:30.581664Z"}],"osv":[{"id":"CVE-2024-0217","title":"Packagekitd: use-after-free in idle function callback","description":"A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.","status":"published","published":"2024-01-03T17:04:37.841Z","modified":"2026-11-08T13:15:15.532548431Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-416"],"updated_at":"2026-11-07T03:07:52.010191Z"},{"id":"UBUNTU-CVE-2024-0217","description":"A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost.","status":"published","published":"2024-01-03T17:15:00Z","modified":"2026-10-17T12:55:59.937445679Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"SUSE-RU-2024:1202-1","title":"Recommended update for libzypp, zypper, PackageKit","description":"This update for libzypp, zypper, PackageKit fixes the following issues:\n\n- Fixup New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)\n- CVE-2024-0217: Check that Finished signal is emitted at most once (bsc#1218544)\n- Add resolver option 'removeOrphaned' for distupgrade (bsc#1221525)\n- New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)\n- Add default stripe minimum\n- Don't expose std::optional where YAST/PK explicitly use c++11.\n- Digest: Avoid using the deprecated OPENSSL_config\n- version 17.32.0\n- ProblemSolution::skipsPatchesOnly overload to handout the patches\n- Show active dry-run/download-only at the commit propmpt\n- Add --skip-not-applicable-patches option\n- Fix printing detailed solver problem description\n- Fix bash-completion to work with right adjusted numbers in the 1st column too\n- Set libzypp shutdown request signal on Ctrl+C\n- In the detailed view show all baseurls not just the first one (bsc#1218171)\n","status":"published","published":"2024-04-11T08:50:04Z","modified":"2026-02-04T02:17:19.485146Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2024:0966-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issues:\n\n- CVE-2024-0217: Check that Finished signal is emitted at most once (bsc#1218544).\n","status":"published","published":"2024-03-21T16:20:47Z","modified":"2026-02-04T03:00:40.521142Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1046-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issues:\n\n- CVE-2024-0217: Check that Finished signal is emitted at most once (bsc#1218544).\n- Dropped unnecessary executable permission (bsc#1209138).\n","status":"published","published":"2024-03-28T10:50:18Z","modified":"2026-02-04T03:01:21.104814Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}
