Bugzilla – Attachment 766779 Details for Bug 1086936
VUL-0: CVE-2018-1106: PackageKit: regular users can install and downgrade arbitrary (signed) packages without admin authorization