CVE-2013-1764
The CVE-2013-1764 issue affects the Zypper/zypp backend in PackageKit prior to 0.8.8. According to multiple sources (SUSE, UBUNTU, Debian, etc.), local users can downgrade packages via the install updates method, indicating a local escalation/precedent flaw that allows downgrades rather than enf...