TI-2020-12681 CVE-2020-16122 · GHSA-jfj4-x686-g8vv
Packagekit's apt backend lets user install untrusted local packages
Priority LOW 36
PackageKit's apt backend mistakenly treated all local debs as trusted.
Vulnerabilities
2 records
Release: PackageKit 0.8.17-4ubuntu6~gcc5.4ubuntu1.5, 1.1.13-2ubuntu1.1, 1.1.9-1ubuntu2.18.04.6 Clear all filters
TI-2020-12680 CVE-2020-16121 · GHSA-6g23-6jw5-9vrf
PackageKit error messages leak presence and mimetype of files to unprivileged users
Priority LOW 16
PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.