Packagekit Project vulnerabilities

Products

• Packagekit 8

Newest

• packagekit, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 more PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root CVE-2026-41651 Public exploitFix available 8.8 HighApril 22, 2026
• packagekit project packagekit, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 more Packagekitd: use-after-free in idle function callback CVE-2024-0217 Fix available 3.3 LowJanuary 3, 2024
• packagekit, redhat enterprise linux +1 more A flaw was found in PackageKit in the way some of the methods exposed by the Transaction... CVE-2022-0987 3.3 LowJune 28, 2022
• packagekit, canonical ubuntu linux +1 more PackageKit error messages leak presence and mimetype of files to unprivileged users CVE-2020-16121 Fix available 3.3 LowSeptember 24, 2020
• packagekit, canonical ubuntu linux +1 more Packagekit's apt backend lets user install untrusted local packages CVE-2020-16122 Fix available 8.2 HighJune 13, 2020
• packagekit, debian linux, redhat enterprise linux server +2 more PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which... CVE-2011-2515 Fix available 5.3 MediumNovember 27, 2019
• packagekit, canonical ubuntu linux, debian linux +6 more +8 more An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users... CVE-2018-1106 Fix available 5.5 MediumApril 23, 2018
• packagekit project packagekit The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages... CVE-2013-1764 2.1 LowApril 16, 2014