PackageKit Project PackageKit
Approved changes feed: RSS · Atom
cpe:2.3:a:packagekit_project:packagekit:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Packagekit Project (164c11a0-d73b-5a56-9c10-cc917d207c90) |
|---|---|
| Product | Packagekit (ead56dee-0d66-50d1-8e39-6a013bec3dbe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/packagekit |
purl2cpe | 2026-06-01 10:12:38.064278 |
pkg:deb/ubuntu/packagekit |
purl2cpe | 2026-06-01 10:12:38.064281 |
pkg:github/packagekit/packagekit |
purl2cpe | 2026-06-01 10:12:38.064284 |
pkg:rpm/centos/packagekit |
purl2cpe | 2026-06-01 10:12:38.064287 |
pkg:rpm/fedora/packagekit |
purl2cpe | 2026-06-01 10:12:38.064289 |
pkg:rpm/opensuse/packagekit |
purl2cpe | 2026-06-01 10:12:38.064292 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-16122 |
vulnerable | 2026-06-08 05:19:27.396073 |
Packagekit's apt backend lets user install untrusted local packages
HIGH (8.2)
PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.
Published: 2020-11-07T04:10:19.889Z
Updated: 2024-09-16T16:13:16.633Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16121 |
vulnerable | 2026-06-08 05:19:27.395521 |
PackageKit error messages leak presence and mimetype of files to unprivileged users
LOW (3.3)
PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
Published: 2020-11-07T04:10:19.447Z
Updated: 2024-09-17T04:04:03.119Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.