CVE-2022-0987: Packagekit Project Packagekit

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

Affected products

• Packagekit Project Packagekit: any version
• Red Hat Enterprise Linux: version 9.0 only

Published 2022-06-28. Last modified 2026-10-08.