[ALSA-2026:11504] Important: PackageKit security update
Type:
security
Severity:
important
Release date:
2026-04-30
Description:
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 PackageKit-gtk3-module-1.2.6-2.el9_7.aarch64.rpm 1c114487e9f58b9925bde9dc0e758344bd840d2506e01edbaeaf9f24ca1ead59
aarch64 PackageKit-command-not-found-1.2.6-2.el9_7.aarch64.rpm 25823887fe0577f9986f6f4897f47ca24e7695cd9de6be442e772e5ce9c805ce
aarch64 PackageKit-gstreamer-plugin-1.2.6-2.el9_7.aarch64.rpm 2c907f74232de66789e4a2e83b78cdd9484392b483384aa275087e94346286ef
aarch64 PackageKit-glib-devel-1.2.6-2.el9_7.aarch64.rpm 42c220f0274f393543e82fdb03db4c83340336424f7f846342909a9f8a1f4280
aarch64 PackageKit-1.2.6-2.el9_7.aarch64.rpm ae61eba5875a84d97a27b7a3d41bd124bda1c3e811ce1bd5b2ed6f28533cc24b
aarch64 PackageKit-glib-1.2.6-2.el9_7.aarch64.rpm d1b1b80b4679137ac83b01cf75caf7b6a4526b2ed31db98fb1f36b361bb6707c
i686 PackageKit-glib-devel-1.2.6-2.el9_7.i686.rpm c76846e542eeb20ff4f9f62cdbd21a26f067bba53a6d1b21ad4e08a787382657
i686 PackageKit-glib-1.2.6-2.el9_7.i686.rpm dc68ab4e066cfb687b09261e8a52f8b3ae13adee38decbbf3f5f6e102ee0d223
ppc64le PackageKit-glib-1.2.6-2.el9_7.ppc64le.rpm 17da1d30b55d80066cf50a474c06180824cb949c263b05103d499195e0ce4e8d
ppc64le PackageKit-gstreamer-plugin-1.2.6-2.el9_7.ppc64le.rpm 23ef422ccfc9e2b967d63abe2715e0691ff6d1747afe1bf886a9f92f8d6035f1
ppc64le PackageKit-gtk3-module-1.2.6-2.el9_7.ppc64le.rpm 4c8203300121fbe9a30e5cf2a72e79e7d249485eb8e369390ef58b0660c2e3d6
ppc64le PackageKit-glib-devel-1.2.6-2.el9_7.ppc64le.rpm 87d8caa4fd019a734db91257773d8546d7308182504044fc4f828112163112ee
ppc64le PackageKit-1.2.6-2.el9_7.ppc64le.rpm c2d515f2c2006bb706fe6d536f2193fc27085ba49952de2e96fc6d8512cb4400
ppc64le PackageKit-command-not-found-1.2.6-2.el9_7.ppc64le.rpm e56bfdd6d12efbe2982e6a04625ed2a3c7c77f805879582584507dba81d7dc04
s390x PackageKit-gtk3-module-1.2.6-2.el9_7.s390x.rpm 5bb0af8909ea078bc36f28ddd8e209fe3f45be04eace63137d513de2c74ed714
s390x PackageKit-glib-devel-1.2.6-2.el9_7.s390x.rpm 77310c16ad5b4c714a5c30fc38363b73c43d8ae4df301bcf0ccc9bbe4174d54c
s390x PackageKit-glib-1.2.6-2.el9_7.s390x.rpm bde63a87653da8ff3adba4e7b240c811b6b5a2517bbaf0ae6a1673d951926d32
s390x PackageKit-command-not-found-1.2.6-2.el9_7.s390x.rpm cc7087c37812104cbc11fa57b94393957b46fd815b8ca5f64b71fbdef6388dc9
s390x PackageKit-1.2.6-2.el9_7.s390x.rpm ecda81200b47115411a279297a05afd4174e380ee1c9567dce3d3f0b7058cb61
x86_64 PackageKit-gtk3-module-1.2.6-2.el9_7.x86_64.rpm 07029d2dd75e0ecf8b5f504ce3891bf02aad8cb6ee513cf6897cd56a9d68064a
x86_64 PackageKit-command-not-found-1.2.6-2.el9_7.x86_64.rpm 25a83ef57e4d1ed00799f2ca25557434ff9ce7c931901ae30cb0926177dbde9b
x86_64 PackageKit-gstreamer-plugin-1.2.6-2.el9_7.x86_64.rpm 31d283944bfd0d604cadc68cc3622d7ce4efdfffe3a66ef90d7a477fe89af4fb
x86_64 PackageKit-glib-1.2.6-2.el9_7.x86_64.rpm 578c12abbe684305134e124d6cca186472d0f4512884877c59d5993efbf55d52
x86_64 PackageKit-1.2.6-2.el9_7.x86_64.rpm e75df3f02c79964a1c2f49a7f6ea36f55b35115ae318ab327235144885a84cdb
x86_64 PackageKit-glib-devel-1.2.6-2.el9_7.x86_64.rpm f25bd047b52dd64819dc24a43b10c9dccbbecc2002776731f01e1662883a9cb8
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.