CVE-2013-1764

The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.

Date published : 2014-04-16

https://bugs.freedesktop.org/show_bug.cgi?id=61231

https://bugzilla.novell.com/show_bug.cgi?id=804983