CVE:CVE-2018-1106
CNNVD:CNNVD-201804-1337
PackageKit是一个适用于Linux系统的新的包管理器。
PackageKit 1.1.10之前版本中存在安全漏洞。本地攻击者可利用该漏洞绕过身份验证，安装受影响的软件包。
solution:Upgrade packagekit_project packagekit to a higher version than 1.1.10,and avoid the version (,1.1.10); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.6,and avoid the version 7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 17.10,and avoid the version 17.10; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0