PackageKit vulnerability