ALSA-2026:11635

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/8/ALSA-2026-11635.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:11635.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALSA-2026:11635
Related
Published
2026-04-29T00:00:00Z
Modified
2026-04-30T14:30:55.021340Z
Summary
Important: PackageKit security update
Details

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.

Security Fix(es):

  • PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8
PackageKit

Package

Name
PackageKit
Purl
pkg:rpm/almalinux/PackageKit

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.12-8.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:11635.json"
PackageKit-command-not-found

Package

Name
PackageKit-command-not-found
Purl
pkg:rpm/almalinux/PackageKit-command-not-found

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.12-8.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:11635.json"
PackageKit-cron

Package

Name
PackageKit-cron
Purl
pkg:rpm/almalinux/PackageKit-cron

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.12-8.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:11635.json"
PackageKit-glib

Package

Name
PackageKit-glib
Purl
pkg:rpm/almalinux/PackageKit-glib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.12-8.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:11635.json"
PackageKit-glib-devel

Package

Name
PackageKit-glib-devel
Purl
pkg:rpm/almalinux/PackageKit-glib-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.12-8.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:11635.json"
PackageKit-gstreamer-plugin

Package

Name
PackageKit-gstreamer-plugin
Purl
pkg:rpm/almalinux/PackageKit-gstreamer-plugin

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.12-8.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:11635.json"
PackageKit-gtk3-module

Package

Name
PackageKit-gtk3-module
Purl
pkg:rpm/almalinux/PackageKit-gtk3-module

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.12-8.el8_10

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:11635.json"