CLSA-2026-1779711412

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779711412.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1779711412
Upstream
Published
2026-05-25T12:16:56Z
Modified
2026-10-26T09:30:04Z
Summary
PackageKit: Fix of CVE-2026-41651
Details
  • CVE-2026-41651: Fix TOCTOU race on transaction flags that allowed unprivileged users to install arbitrary RPMs and execute scriptlets as root; prevent unconditional flag overwrite, enforce state-transition validation, and read cached flags at authorization time rather than at dispatch.
References

Affected packages

TuxCare:AlmaLinux:9.2
PackageKit

Package

Name
PackageKit
Purl
pkg:rpm/tuxcare/PackageKit?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.4-2.el9_2.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779711412.json"
PackageKit-command-not-found

Package

Name
PackageKit-command-not-found
Purl
pkg:rpm/tuxcare/PackageKit-command-not-found?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.4-2.el9_2.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779711412.json"
PackageKit-cron

Package

Name
PackageKit-cron
Purl
pkg:rpm/tuxcare/PackageKit-cron?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.4-2.el9_2.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779711412.json"
PackageKit-glib

Package

Name
PackageKit-glib
Purl
pkg:rpm/tuxcare/PackageKit-glib?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.4-2.el9_2.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779711412.json"
PackageKit-glib-devel

Package

Name
PackageKit-glib-devel
Purl
pkg:rpm/tuxcare/PackageKit-glib-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.4-2.el9_2.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779711412.json"
PackageKit-gstreamer-plugin

Package

Name
PackageKit-gstreamer-plugin
Purl
pkg:rpm/tuxcare/PackageKit-gstreamer-plugin?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.4-2.el9_2.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779711412.json"
PackageKit-gtk3-module

Package

Name
PackageKit-gtk3-module
Purl
pkg:rpm/tuxcare/PackageKit-gtk3-module?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2.4-2.el9_2.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779711412.json"