tag: libzypp

1. When PackageKit and ZYpp disagree: CVE-2026-104619 and CVE-2026-104620

   2026-11-10

   CVE-2026-104619 and CVE-2026-104620: signed PackageKit rollback and a simulated-install root write leading to root shells on SUSE/openSUSE.