[ALSA-2026:19354] Important: PackageKit security update
Type:
security
Severity:
important
Release date:
2026-05-26
Description:
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API. Security Fix(es): * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 PackageKit-gstreamer-plugin-1.2.6-2.el9_8.aarch64.rpm 06ff4e72f841d651f8ca2eccd6ab6d359c619fe299d962b335802b8a681a1161
aarch64 PackageKit-glib-devel-1.2.6-2.el9_8.aarch64.rpm 58cbaf94f8bb8171dbebd643fa792ac53521ead495bafdfc40fba7e4de8cf404
aarch64 PackageKit-command-not-found-1.2.6-2.el9_8.aarch64.rpm 6b5ffbc83f1504de894b27a1fe1e47b24482653fa331f628e47d746b8a6bc8f9
aarch64 PackageKit-gtk3-module-1.2.6-2.el9_8.aarch64.rpm 85a3e671fec6974de0943f03430673e231c8ff35187740338c5083609afbea3c
aarch64 PackageKit-glib-1.2.6-2.el9_8.aarch64.rpm d0e93757c3324737f55ad676c1788cbb379fe7a94d63b90044df92806d638d93
aarch64 PackageKit-1.2.6-2.el9_8.aarch64.rpm d41a03745eb05c7c680bb53958f3accda650b4cbe5563db7ce70dd5edd973102
i686 PackageKit-glib-devel-1.2.6-2.el9_8.i686.rpm 7c14d96d71f8211872b0c5d981a2b487b3129ebf1a2be22763064ab51c2da0d6
i686 PackageKit-glib-1.2.6-2.el9_8.i686.rpm c1448185a4015d52a52692fdf01c8accf751d639b6353b9c0b7c48de1d26e41c
ppc64le PackageKit-glib-devel-1.2.6-2.el9_8.ppc64le.rpm 18a98a97ac6b4af6e162bebd5ffdf2480dc52625c68f1033e905f18c2194ffc7
ppc64le PackageKit-glib-1.2.6-2.el9_8.ppc64le.rpm 48eeab7042b4c0ae5eb43cbbfa2b9dde3e1ba53283cf80c639ba402b65e004b9
ppc64le PackageKit-command-not-found-1.2.6-2.el9_8.ppc64le.rpm 88fb698c6ab8b4b0f73b93e02fe26022189522303c24bdf5249566a97c67ca7c
ppc64le PackageKit-gstreamer-plugin-1.2.6-2.el9_8.ppc64le.rpm cea3b2632276f5ddebecdae1a6a4beaaa6ca30865cbb622be208edd52612df79
ppc64le PackageKit-1.2.6-2.el9_8.ppc64le.rpm d5055e82ed298bf334f960cea2a5dbe6dd1af57094c4c4032d04e0d1303a76fd
ppc64le PackageKit-gtk3-module-1.2.6-2.el9_8.ppc64le.rpm d638e87972dac1c53814bc83177230beb958e69765c77f1e852ecb59a7f24e66
s390x PackageKit-command-not-found-1.2.6-2.el9_8.s390x.rpm 01a14a8c453b780c838b295690d361b6f0d2cb4b9f3f15fde24bf86e04821100
s390x PackageKit-glib-1.2.6-2.el9_8.s390x.rpm 2180ed788daca72694a0bb6eb27be57dfddc2ada255d454135bcf353f8f94e4e
s390x PackageKit-1.2.6-2.el9_8.s390x.rpm 443d67c2cd9c7d2ce452622fe270e1a3f93d6b9e066c17c62c4c69e6a2525f00
s390x PackageKit-gtk3-module-1.2.6-2.el9_8.s390x.rpm c98bb9987368f30120bcc171b60f679cab343a82f5280cd780f728209eb80003
s390x PackageKit-glib-devel-1.2.6-2.el9_8.s390x.rpm e3bb3bb6da874061630675975b1064d5c6e267dd622b6fd29193baf1023ec6e6
x86_64 PackageKit-gtk3-module-1.2.6-2.el9_8.x86_64.rpm 04fc84754fda59c70e1f2ad32da64105df6cc46f176b40b4dc54a6982486a4d4
x86_64 PackageKit-command-not-found-1.2.6-2.el9_8.x86_64.rpm 40ef92c5f77d90262fbc5e0b70311a7364a5bc8aeccaed02fad71567ae465a8b
x86_64 PackageKit-gstreamer-plugin-1.2.6-2.el9_8.x86_64.rpm 54798f84e039d247c61f87d8373a87fbdd943ab25f78cfd260a84270cd96ff4d
x86_64 PackageKit-glib-devel-1.2.6-2.el9_8.x86_64.rpm 88edc14fa31ba5e54ee14251eb9f30ac2291f74baec89180dbd40312eb1ca24d
x86_64 PackageKit-1.2.6-2.el9_8.x86_64.rpm b50eba27d092a87b3db0d8999ef8c13d9a395baf228c9ab51bc60a99a9240e0c
x86_64 PackageKit-glib-1.2.6-2.el9_8.x86_64.rpm b63c328f0e551b6f8185d4a044c32dcc0fd777f762ba5c716161dc12244fd477
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.