Security Advisory
CVE-2013-1764
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.