I knew it! Ever wondered how you can just install packages without having to install a password in Fedora when you type a command that doesn't exist in the terminal? Turns out that's indeed unsafe, and now PackageKit has a privilege escalation CVE.

I guess this explains why some things suddenly started to ask for passwords recently

#Security #Linux #CVE