~/notes

1. One DNF5 query away from /etc/shadow: CVE-2026-123177

   2026-11-14

   CVE-2026-123177: an unprivileged DNF5 query makes the root daemon copy local files into its readable cache.

2. When PackageKit and ZYpp disagree: CVE-2026-104619 and CVE-2026-104620

   2026-11-10

   CVE-2026-104619 and CVE-2026-104620: signed PackageKit rollback and a simulated-install root write leading to root shells on SUSE/openSUSE.