504 matches found
SUSE-SU-2026:3404-1 Security update for PackageKit
This update for PackageKit fixes the following issues: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250...
PT-2026-66658
These are all security issues fixed in the PackageKit-1.3.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11406-1 PackageKit-1.3.6-1.1 on GA media
These are all security issues fixed in the PackageKit-1.3.6-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLES16: PackageKit / PackageKit-backend-zypp / PackageKit-branding-upstream / etc (SUSE-SU-2026:22860-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22860-1 advisory. Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit
C...
openSUSE 16: PackageKit / PackageKit-backend-dnf / PackageKit-backend-zypp / etc (openSUSE-SU-2026:21425-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21425-1 advisory. Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue...
Security update for PackageKit (moderate)
openSUSE security update: security update for packagekit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21425-1 Rating: moderate References: bsc1263252 bsc1267250 Cross-References: CVE-2026-10294 CVSS scores: CVE-2026-10294 SUSE : 4.3...
OPENSUSE-SU-2026:21425-1 Security update for PackageKit
This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...
SUSE-SU-2026:22860-1 Security update for PackageKit
This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...
Oracle Linux 10 : PackageKit (ELSA-2026-19141)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19141 advisory. 1.2.8-8.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch Tenable has extracted the preceding description block directly from the Oracle...
PackageKit security update
1.2.8-8.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch...
Oracle Linux 9 : PackageKit (ELSA-2026-19354)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19354 advisory. 1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch Tenable has extracted the preceding description block directly from the Oracle...
PackageKit security update
1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch...
MiracleLinux 9 : PackageKit-1.2.6-2.el9_8 (AXSA:2026-1214:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1214:03 advisory. PackageKit: race condition vulnerability leads to arbitrary package installation as root CVE-2026-41651 Tenable has extracted the preceding description block...
PackageKit Advanced Vulnerability Assessment with D-Bus and Polkit Security Analysis
This Python tool is an advanced security assessment framework designed to evaluate potential exposure to a PackageKit-related vulnerability scenario by combining version analysis, policy inspection, and D-Bus interaction testing...
📄 MacOS PackageKit ZSH Environment Privilege Escalation
This Metasploit module exploits CVE-2024-27822, a vulnerability in macOS PackageKit.framework where PKG installer scripts using a ZSH shebang !/bin/zsh are executed as root while inheriting the installing users environment. This causes ZSH to load the users /.zshenv with root privileges before th...
TencentOS Server 2: PackageKit (TSSA-2026:0567)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0567 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
OESA-2026-2689 PackageKit security update
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API. Security Fixes: A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of th...
