{"id":"CVE-2026-41651","aliases":["ALSA-2026:11504","ALSA-2026:11635","ALSA-2026:19141","ALSA-2026:19354","CLSA-2026-1778773906","CLSA-2026-1779711412","DEBIAN-CVE-2026-41651","EUVD-2026-24742","GHSA-f55j-vvr9-69xv","MGASA-2026-0180","OESA-2026-2140","RHSA-2026:11504","RHSA-2026:11635","RHSA-2026:17558","RHSA-2026:17560","RHSA-2026:17561","RHSA-2026:18024","RHSA-2026:18031","RHSA-2026:18036","RHSA-2026:19141","RHSA-2026:19354","RHSA-2026:19454","RHSA-2026:19601","RHSA-2026:22146","RLSA-2026:11504","RLSA-2026:11635","RLSA-2026:19141","RLSA-2026:19354","ROOT-OS-UBUNTU-2004-CVE-2026-41651","SUSE-SU-2026:1619-1","SUSE-SU-2026:1619-2","SUSE-SU-2026:1700-1","SUSE-SU-2026:1701-1","SUSE-SU-2026:1939-1","SUSE-SU-2026:21427-1","SUSE-SU-2026:5144-1","UBUNTU-CVE-2026-41651","USN-8195-3","openSUSE-SU-2026:10629-1","openSUSE-SU-2026:20646-1"],"status":"published","title":"PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root","description":"PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-\u003ecached_transaction_flags`  combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-\u003ecached_transaction_flags` without checking whether the transaction has already been  authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00546,"percentile":0.46298,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-367"],"published":"2026-04-22T13:11:40Z","modified":"2026-11-10T13:15:07Z","exploits":[{"source":"pocgithub","id":"CipherCloak/CVE-2026-41651","title":"CipherCloak/CVE-2026-41651","date":"2026-04-23","url":"https://github.com/CipherCloak/CVE-2026-41651"},{"source":"pocgithub","id":"Vozec/CVE-2026-41651","title":"Vozec/CVE-2026-41651","date":"2026-04-23","url":"https://github.com/Vozec/CVE-2026-41651"},{"source":"pocgithub","id":"ashrafzaryouh/CVE-2026-41651","title":"ashrafzaryouh/CVE-2026-41651","date":"2026-04-24","url":"https://github.com/ashrafzaryouh/CVE-2026-41651"},{"source":"pocgithub","id":"baph00met/CVE-2026-41651","title":"baph00met/CVE-2026-41651","date":"2026-04-24","url":"https://github.com/baph00met/CVE-2026-41651"},{"source":"pocgithub","id":"dinosn/pack2theroot-lab","title":"dinosn/pack2theroot-lab","date":"2026-04-25","url":"https://github.com/dinosn/pack2theroot-lab"},{"source":"pocgithub","id":"shibaaa204/Pack2TheRoot","title":"shibaaa204/Pack2TheRoot","date":"2026-04-29","url":"https://github.com/shibaaa204/Pack2TheRoot"},{"source":"pocgithub","id":"Kowntaewook/CVE-2026-41651-analysis","title":"Kowntaewook/CVE-2026-41651-analysis","date":"2026-05-06","url":"https://github.com/Kowntaewook/CVE-2026-41651-analysis"},{"source":"pocgithub","id":"mawussid/CVE-2026-41651-Python","title":"mawussid/CVE-2026-41651-Python","date":"2026-05-06","url":"https://github.com/mawussid/CVE-2026-41651-Python"},{"source":"pocgithub","id":"0xDVRK/CVE-2026-41651","title":"0xDVRK/CVE-2026-41651","date":"2026-07-25","url":"https://github.com/0xDVRK/CVE-2026-41651"},{"source":"pocgithub","id":"gbuyssens/CVE-2026-41651","title":"gbuyssens/CVE-2026-41651","date":"2026-08-02","url":"https://github.com/gbuyssens/CVE-2026-41651"},{"source":"pocgithub","id":"Thhc10/CVE-2026-41651","title":"Thhc10/CVE-2026-41651","date":"2026-09-23","url":"https://github.com/Thhc10/CVE-2026-41651"},{"source":"pocgithub","id":"thiscitze/cve-2026-41651-poc","title":"thiscitze/cve-2026-41651-poc","date":"2026-11-06","url":"https://github.com/thiscitze/cve-2026-41651-poc"}],"fixes":[{"ecosystem":"AlmaLinux:9","package":"PackageKit","fixed_in":["1.2.6-2.el9_7","1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"PackageKit-command-not-found","fixed_in":["1.2.6-2.el9_7","1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"PackageKit-glib","fixed_in":["1.2.6-2.el9_7","1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"PackageKit-glib-devel","fixed_in":["1.2.6-2.el9_7","1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"PackageKit-gstreamer-plugin","fixed_in":["1.2.6-2.el9_7","1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"PackageKit-gtk3-module","fixed_in":["1.2.6-2.el9_7","1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"PackageKit","fixed_in":["1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"PackageKit-command-not-found","fixed_in":["1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"PackageKit-cron","fixed_in":["1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"PackageKit-glib","fixed_in":["1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"PackageKit-glib-devel","fixed_in":["1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"PackageKit-gstreamer-plugin","fixed_in":["1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"PackageKit-gtk3-module","fixed_in":["1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"PackageKit","fixed_in":["1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"PackageKit-command-not-found","fixed_in":["1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"PackageKit-glib","fixed_in":["1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"PackageKit-glib-devel","fixed_in":["1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"PackageKit-gstreamer-plugin","fixed_in":["1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"PackageKit-gtk3-module","fixed_in":["1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit","fixed_in":["1.2.6-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-command-not-found","fixed_in":["1.2.6-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-cron","fixed_in":["1.2.6-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-glib","fixed_in":["1.2.6-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-glib-devel","fixed_in":["1.2.6-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-gstreamer-plugin","fixed_in":["1.2.6-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-gtk3-module","fixed_in":["1.2.6-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit","fixed_in":["1.2.4-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-command-not-found","fixed_in":["1.2.4-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-cron","fixed_in":["1.2.4-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-glib","fixed_in":["1.2.4-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-glib-devel","fixed_in":["1.2.4-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-gstreamer-plugin","fixed_in":["1.2.4-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-gtk3-module","fixed_in":["1.2.4-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"packagekit","fixed_in":["1.2.6-5+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"packagekit","fixed_in":["1.3.1-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"packagekit","fixed_in":["1.3.5-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"packagekit","fixed_in":["1.2.6-2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"PackageKit","fixed_in":["1.1.12-11.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"PackageKit","fixed_in":["1.2.8-5.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"PackageKit","fixed_in":["1.2.8-5.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"PackageKit","fixed_in":["1.2.8-5.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"PackageKit","fixed_in":["1.1.12-11.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-glib","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-debugsource","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-glib-devel","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.6-2.el9_7","0:1.2.6-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-cron","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-glib","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-glib-devel","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-cron","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-glib","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-cron","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-glib","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-6.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-cron","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-glib","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-cron","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-glib","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-cron","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-glib","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-cron","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-glib","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-cron","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-glib","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.1.12-6.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-glib","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.4-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-glib","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-debugsource","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-glib-devel","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.6-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-glib","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.4-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-command-not-found","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-debuginfo","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-debugsource","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-glib","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-gtk3-module","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-glib-devel","fixed_in":["0:1.2.8-8.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-command-not-found","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-debugsource","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-glib","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-gtk3-module","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-debugsource","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-glib-devel","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.6-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-command-not-found","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-command-not-found-debuginfo","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-debuginfo","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-debugsource","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-glib","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-glib-debuginfo","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-gstreamer-plugin-debuginfo","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-gtk3-module","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-gtk3-module-debuginfo","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-glib-devel","fixed_in":["0:1.2.8-8.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-command-not-found","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-debuginfo","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-glib","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-gstreamer-plugin","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-gtk3-module","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-yum","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-cron","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-glib-devel","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-yum-plugin","fixed_in":["0:1.1.10-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"PackageKit","fixed_in":["0:1.2.6-2.el9_7"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"PackageKit","fixed_in":["0:1.1.12-8.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"PackageKit","fixed_in":["0:1.2.8-8.el10"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:20.04","package":"packagekit","fixed_in":["1.1.13-2ubuntu1.1.aikido.1","1.1.13-2ubuntu1.1.aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:20.04","package":"rootio-packagekit","fixed_in":["1.1.13-2ubuntu1.1.aikido.1","1.1.13-2ubuntu1.1.aikido.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"packagekit","fixed_in":["0.8.17-4ubuntu6~gcc5.4ubuntu1.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"packagekit","fixed_in":["1.1.9-1ubuntu2.18.04.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"packagekit","fixed_in":["1.1.13-2ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"packagekit","fixed_in":["1.2.5-2ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"packagekit","fixed_in":["1.2.8-2ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"packagekit","fixed_in":["1.3.1-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"packagekit","fixed_in":["1.3.4-3ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"PackageKit","fixed_in":["1.3.5-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-5+deb12u1"}]}],"versions":["1.2.6-5"]},{"source":"osv","ecosystem":"Debian:13","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1+deb13u1"}]}],"versions":["1.3.1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1"}]}],"versions":["1.3.1-1","1.3.2-1","1.3.3-1","1.3.4-1","1.3.4-3"]},{"source":"osv","ecosystem":"Mageia:9","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-11.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-5.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-5.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-5.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.12-11.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-6.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-command-not-found-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-gstreamer-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-gtk3-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-command-not-found","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-gstreamer-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-gtk3-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-yum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"PackageKit-yum-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.10-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.12-8.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-8.el10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.el9_7"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:20.04","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-2ubuntu1.1.aikido.1"},{"fixed":"1.1.13-2ubuntu1.1.aikido.2"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:20.04","package":"rootio-packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-2ubuntu1.1.aikido.1"},{"fixed":"1.1.13-2ubuntu1.1.aikido.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150500.6.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150500.6.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150500.6.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150500.6.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.17-4ubuntu6~gcc5.4ubuntu1.5+esm1"}]}],"versions":["0.8.17-4ubuntu6~gcc5.3","0.8.17-4ubuntu6~gcc5.4ubuntu1","0.8.17-4ubuntu6~gcc5.4ubuntu1.1","0.8.17-4ubuntu6~gcc5.4ubuntu1.2","0.8.17-4ubuntu6~gcc5.4ubuntu1.3","0.8.17-4ubuntu6~gcc5.4ubuntu1.4","0.8.17-4ubuntu6~gcc5.4ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.9-1ubuntu2.18.04.6+esm1"}]}],"versions":["1.1.7-1","1.1.9-1","1.1.9-1ubuntu1","1.1.9-1ubuntu2","1.1.9-1ubuntu2.18.04.1","1.1.9-1ubuntu2.18.04.3","1.1.9-1ubuntu2.18.04.4","1.1.9-1ubuntu2.18.04.5","1.1.9-1ubuntu2.18.04.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-2ubuntu1.1+esm1"}]}],"versions":["1.1.12-5ubuntu4","1.1.13-1","1.1.13-2","1.1.13-2build1","1.1.13-2ubuntu1","1.1.13-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2ubuntu3.1"}]}],"versions":["1.2.2-2ubuntu3","1.2.4-1ubuntu1","1.2.4-1ubuntu2","1.2.5-1ubuntu1","1.2.5-2ubuntu1","1.2.5-2ubuntu2","1.2.5-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-2ubuntu1.5"}]}],"versions":["1.2.7-1","1.2.8-1","1.2.8-1build1","1.2.8-2","1.2.8-2build2","1.2.8-2build3","1.2.8-2ubuntu1","1.2.8-2ubuntu1.1","1.2.8-2ubuntu1.2","1.2.8-2ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu1.1"}]}],"versions":["1.3.0-3build1","1.3.1-1","1.3.1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-3ubuntu1"}]}],"versions":["1.3.1-1","1.3.2-1","1.3.3-1","1.3.4-1","1.3.4-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.17-4ubuntu6~gcc5.4ubuntu1.5+esm1"}]}],"versions":["0.8.17-4ubuntu6~gcc5.3","0.8.17-4ubuntu6~gcc5.4ubuntu1","0.8.17-4ubuntu6~gcc5.4ubuntu1.1","0.8.17-4ubuntu6~gcc5.4ubuntu1.2","0.8.17-4ubuntu6~gcc5.4ubuntu1.3","0.8.17-4ubuntu6~gcc5.4ubuntu1.4","0.8.17-4ubuntu6~gcc5.4ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.9-1ubuntu2.18.04.6+esm1"}]}],"versions":["1.1.7-1","1.1.9-1","1.1.9-1ubuntu1","1.1.9-1ubuntu2","1.1.9-1ubuntu2.18.04.1","1.1.9-1ubuntu2.18.04.3","1.1.9-1ubuntu2.18.04.4","1.1.9-1ubuntu2.18.04.5","1.1.9-1ubuntu2.18.04.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"packagekit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.13-2ubuntu1.1+esm1"}]}],"versions":["1.1.12-5ubuntu4","1.1.13-1","1.1.13-2","1.1.13-2build1","1.1.13-2ubuntu1","1.1.13-2ubuntu1.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"PackageKit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1.1"}]}]}],"products":[{"vendor":"packagekit","product":"packagekit"},{"vendor":"packagekit_project","product":"packagekit"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://github.com/PackageKit/PackageKit/security/advisories/GHSA-f55j-vvr9-69xv","tags":["x_refsource_CONFIRM","Exploit","Vendor Advisory","advisory","article","report"]},{"url":"https://github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c#L2273-L2277","tags":["x_refsource_MISC","Product","web","article"]},{"url":"https://github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c#L4036","tags":["x_refsource_MISC","Product","web","article"]},{"url":"https://github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c#L873-L882","tags":["x_refsource_MISC","Product","web","article"]},{"url":"https://github.security.telekom.com/2026/04/pack2theroot-linux-local-privilege-escalation.html","tags":["x_refsource_MISC","Exploit","Third Party Advisory","web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/22/6","tags":["Mailing List","Patch","Third Party Advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-41651","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460604","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41651.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22146","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19601","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19141","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:11635","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17558","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17561","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17560","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:18024","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:18036","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19454","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:18031","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:11504","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19354","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://bugzilla.redhat.com/2460604","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-11504.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-11635.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19141.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19354.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778773906.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779711412.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41651.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41651","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-41651","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0180.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35428","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00136.html","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/22/6","tags":["web"]},{"url":"https://lists.freedesktop.org/archives/packagekit/2026-April/026513.html","tags":["web","report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2140","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11504.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41651","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11635.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17558.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17560.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17561.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18024.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18031.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18036.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19141.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19354.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19454.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19601.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22146.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:11504","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:11635","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19141","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19354","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261619-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262220","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41651","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261619-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261700-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261701-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261939-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621427-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265144-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1284954","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104620","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-41651","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8195-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8195-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8195-3","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-41651","title":"PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root","description":"PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-\u003ecached_transaction_flags`  combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-\u003ecached_transaction_flags` without checking whether the transaction has already been  authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.","status":"published","published":"2026-04-22T13:11:40.174Z","modified":"2026-07-15T00:58:55.389Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-367","CWE-367"],"updated_at":"2026-11-02T13:41:08.498858Z"}],"euvd":[{"id":"EUVD-2026-24742","description":"PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-\u003ecached_transaction_flags`  combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-\u003ecached_transaction_flags` without checking whether the transaction has already been  authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.","status":"published","published":"2026-04-22T13:11:40Z","modified":"2026-07-15T00:58:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:56.918546Z"}],"nvd":[{"id":"CVE-2026-41651","description":"PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-\u003ecached_transaction_flags`  combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-\u003ecached_transaction_flags` without checking whether the transaction has already been  authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.","status":"published","published":"2026-04-22T14:17:04.617Z","modified":"2026-11-11T23:10:00.263Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-367"],"updated_at":"2026-11-12T01:26:58.520432Z"}],"osv":[{"id":"CVE-2026-41651","title":"PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root","description":"PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-\u003ecached_transaction_flags`  combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-\u003ecached_transaction_flags` without checking whether the transaction has already been  authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.","status":"published","published":"2026-04-22T13:11:40.174Z","modified":"2026-11-10T13:27:19.04917113Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-367"],"updated_at":"2026-11-10T14:01:20.120938Z"},{"id":"DEBIAN-CVE-2026-41651","description":"PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.  A local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-\u003ecached_transaction_flags`  combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`: 1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-\u003ecached_transaction_flags` without checking whether the transaction has already been  authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING. 2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags. 3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.","status":"published","published":"2026-04-22T14:17:04.617Z","modified":"2026-11-12T09:47:26.078670929Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-12T10:16:30.501395Z"},{"id":"OESA-2026-2140","title":"PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API.\r\n\r\nSecurity Fix(es):\n\nPackageKit is a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-\u0026gt;cached_transaction_flags` combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-\u0026gt;cached_transaction_flags` without checking whether the transaction has already been authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler\u0026apos;s idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker\u0026apos;s flags.(CVE-2026-41651)","status":"published","published":"2026-05-03T11:11:07Z","modified":"2026-08-18T01:19:50.170265741Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:11504","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-04-30T10:10:38Z","modified":"2026-06-30T10:34:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:11635","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-04-30T10:10:41Z","modified":"2026-06-30T10:35:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:17558","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-15T10:15:04Z","modified":"2026-06-30T10:38:28Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:17560","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-15T10:15:04Z","modified":"2026-06-30T10:38:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:17561","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-15T10:15:05Z","modified":"2026-06-30T10:38:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:18024","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-18T10:05:47Z","modified":"2026-06-30T10:38:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:18031","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-19T10:06:22Z","modified":"2026-06-30T10:38:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:18036","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-19T10:06:23Z","modified":"2026-06-30T10:38:54Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19141","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-20T10:10:00Z","modified":"2026-06-30T10:39:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19354","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-20T10:10:32Z","modified":"2026-06-30T10:40:26Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19454","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-20T10:10:45Z","modified":"2026-06-30T10:40:36Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19601","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-05-21T10:08:26Z","modified":"2026-06-30T10:41:03Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22146","title":"Red Hat Security Advisory: PackageKit security update","status":"published","published":"2026-06-02T10:08:32Z","modified":"2026-06-30T10:42:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RLSA-2026:11504","title":"Important: PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.\n\nSecurity Fix(es):\n\n* PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-30T12:03:33.126838Z","modified":"2026-04-30T12:30:06.818482Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:11635","title":"Important: PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.\n\nSecurity Fix(es):\n\n* PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-30T18:01:05.380956Z","modified":"2026-04-30T18:25:07.97129Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19141","title":"Important: PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.\n\nSecurity Fix(es):\n\n* PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:09.11229557Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19354","title":"Important: PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.\n\nSecurity Fix(es):\n\n* PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-20T06:03:42.289172Z","modified":"2026-05-20T06:30:04.704366143Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-41651","description":"PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5. A local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-\u003ecached_transaction_flags`  combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`: 1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-\u003ecached_transaction_flags` without checking whether the transaction has already been  authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING. 2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags. 3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.","status":"published","published":"2026-04-23T00:00:00Z","modified":"2026-06-30T18:18:04.671368883Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:18.393417Z"},{"id":"ALSA-2026:11504","title":"Important: PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  \n\nSecurity Fix(es):  \n\n  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-29T00:00:00Z","modified":"2026-10-29T11:32:30.890859997Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:11635","title":"Important: PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  \n\nSecurity Fix(es):  \n\n  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-29T00:00:00Z","modified":"2026-10-29T11:02:23.510617223Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19141","title":"Important: PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  \n\nSecurity Fix(es):  \n\n  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:17.278001608Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19354","title":"Important: PackageKit security update","description":"PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  \n\nSecurity Fix(es):  \n\n  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:33.915208832Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"CLSA-2026-1778773906","title":"PackageKit: Fix of CVE-2026-41651","description":"- CVE-2026-41651: fix TOCTOU race on cached transaction flags that allowed\n  unprivileged users to install arbitrary RPM packages as root via the\n  PackageKit D-Bus interface, leading to local privilege escalation; reject\n  re-invocation of action methods on transactions that have left the NEW state.","status":"published","published":"2026-05-14T18:20:07Z","modified":"2026-06-01T00:32:52.233675461Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779711412","title":"PackageKit: Fix of CVE-2026-41651","description":"- CVE-2026-41651: Fix TOCTOU race on transaction flags that allowed unprivileged\n  users to install arbitrary RPMs and execute scriptlets as root; prevent\n  unconditional flag overwrite, enforce state-transition validation, and read\n  cached flags at authorization time rather than at dispatch.","status":"published","published":"2026-05-25T12:16:56Z","modified":"2026-10-26T09:30:04.925613049Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"MGASA-2026-0180","title":"Updated packagekit packages fix security vulnerability","description":"PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to\narbitrary package installation as root. (CVE-2026-41651)\n","status":"published","published":"2026-06-09T05:29:33Z","modified":"2026-06-09T05:30:05.889919549Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10629-1","title":"PackageKit-1.3.5-1.1 on GA media","description":"These are all security issues fixed in the PackageKit-1.3.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-28T00:00:00Z","modified":"2026-04-29T08:01:28.111977Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20646-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issues:\n\n- CVE-2026-41651: race condition allows for arbitrary RPM package installation as root and can lead to LPE\n  (bsc#1262220).\n","status":"published","published":"2026-04-29T09:45:23Z","modified":"2026-05-01T18:26:43.283504Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"ROOT-OS-UBUNTU-2004-CVE-2026-41651","title":"CVE-2026-41651 in packagekit - Patched by Root","description":"Root has patched CVE-2026-41651 in the packagekit package for Root:Ubuntu:20.04. Multiple fixed versions available.","status":"published","published":"2026-08-19T12:09:26Z","modified":"2026-08-19T15:15:16.684628136Z","updated_at":"2026-11-02T15:53:33.943322Z"},{"id":"SUSE-SU-2026:1619-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issue:\n\n- CVE-2026-41651: Do not allow re-invoking methods on non-new transactions (bsc#1262220).\n","status":"withdrawn","published":"2026-04-24T14:34:25Z","modified":"2026-07-13T14:00:34.997398195Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1619-2","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issue:\n\n- CVE-2026-41651: Do not allow re-invoking methods on non-new transactions (bsc#1262220).\n","status":"published","published":"2026-05-18T13:19:08Z","modified":"2026-05-19T08:45:06.228656837Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1700-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issue:\n\n- CVE-2026-41651: race condition allows for arbitrary RPM package installation as root and can lead to LPE\n  (bsc#1262220).\n","status":"published","published":"2026-05-06T07:42:33Z","modified":"2026-05-07T08:45:35.687387Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1701-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issue:\n\n- CVE-2026-41651: race condition allows for arbitrary RPM package installation as root and can lead to LPE\n  (bsc#1262220).\n","status":"published","published":"2026-05-06T07:42:44Z","modified":"2026-05-07T08:45:38.161565Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1939-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issue:\n\n- CVE-2026-41651: race condition allows for arbitrary RPM package installation as root and can lead to LPE\n  (bsc#1262220).\n","status":"published","published":"2026-05-18T07:43:52Z","modified":"2026-05-19T08:45:08.26861736Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:21427-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issues:\n\n- CVE-2026-41651: race condition allows for arbitrary RPM package installation as root and can lead to LPE\n  (bsc#1262220).\n","status":"published","published":"2026-04-29T09:45:09Z","modified":"2026-05-05T18:23:49.680765Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:5144-1","title":"Security update for PackageKit","description":"This update for PackageKit fixes the following issues:\n\n- CVE-2026-41651: local root exploit security vulnerability (bsc#1262220).\n- CVE-2026-104620: local privilege escalation by any local user can call `InstallFiles` with the `SIMULATE` flag without\n  a `polkit` check (bsc#1284954).\n","status":"published","published":"2026-11-09T13:34:12Z","modified":"2026-11-10T13:15:07.787475346Z","updated_at":"2026-11-10T13:29:51.103746Z"},{"id":"USN-8195-3","title":"packagekit vulnerability","description":"USN-8195-1 fixed a vulnerability in PackageKit. This update provides\nthe corresponding fix to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that PackageKit incorrectly handled certain transactions.\n A local attacker could use this issue to install arbitrary packages as\n root, possibly resulting in privilege escalation.","status":"published","published":"2026-04-29T08:59:18Z","modified":"2026-06-30T18:15:50.621255664Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}