Eclipse Equinox 安全漏洞

Eclipse Equinox is a subproject of the Eclipse Foundation that provides certified implementations of the OSGi R4.x Core Framework specification. A security vulnerability exists in Eclipse Equinox that stems from the ability of an installable unit in the p2 module to alter the installation and loc...

USN-4538-1: PackageKit vulnerabilities

Vaisha Bernard discovered that PackageKit incorrectly handled certain methods. A local attacker could use this issue to learn the MIME type of any file on the system. CVE-2020-16121 Sami Niemimäki discovered that PackageKit incorrectly handled local deb packages. A local user could possibly use...