Description
The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.openwall.com/lists/oss-security/2013/02/25/20 ↗
- https://gitorious.org/packagekit/packagekit/source/NEWS ↗
- https://bugs.freedesktop.org/show_bug.cgi?id=61231 ↗
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00026.html ↗
- https://bugzilla.novell.com/show_bug.cgi?id=804983 ↗
- https://gitorious.org/packagekit/packagekit/commit/d3d14631042237bcfe6fb30a60e59bb6d94af425 ↗