{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"HIGH" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"PackageKit is a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction->cached_transaction_flags` combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction->cached_transaction_flags` without checking whether the transaction has already been authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.", "category":"general", "title":"Synopsis" } ], "publisher":null, "references":[ { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41651" }, { "summary":"CVE-2026-41651 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/cve/2026/csaf-openeuler-cve-2026-41651.json" }, { "summary":"openEuler-SA-2026-2140", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2140" }, { "summary":"CVE-2026-41651", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-41651&packageName=PackageKit" } ], "title":"openEuler cve CVE-2026-41651", "tracking":{ "initial_release_date":"2026-05-06T10:48:37+08:00", "revision_history":[ { "date":"2026-05-06T10:48:37+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-05-06T10:48:37+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-05-06T10:48:37+08:00", "id":"CVE-2026-41651", "version":"1.0.0", "status":"interim" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"openEuler-22.03-LTS-SP4", "name":"openEuler-22.03-LTS-SP4" }, "name":"openEuler-22.03-LTS-SP4", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"openEuler-24.03-LTS", "name":"openEuler-24.03-LTS" }, "name":"openEuler-24.03-LTS", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"openEuler-24.03-LTS-SP1", "name":"openEuler-24.03-LTS-SP1" }, "name":"openEuler-24.03-LTS-SP1", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"openEuler-20.03-LTS-SP4", "name":"openEuler-20.03-LTS-SP4" }, "name":"openEuler-20.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-1.1.12-11.oe2203sp4.aarch64.rpm", "name":"PackageKit-1.1.12-11.oe2203sp4.aarch64.rpm" }, "name":"PackageKit-1.1.12-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.aarch64.rpm", "name":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.aarch64.rpm" }, "name":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.aarch64.rpm", "name":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.aarch64.rpm" }, "name":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-debugsource-1.1.12-11.oe2203sp4.aarch64.rpm", "name":"PackageKit-debugsource-1.1.12-11.oe2203sp4.aarch64.rpm" }, "name":"PackageKit-debugsource-1.1.12-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-devel-1.1.12-11.oe2203sp4.aarch64.rpm", "name":"PackageKit-devel-1.1.12-11.oe2203sp4.aarch64.rpm" }, "name":"PackageKit-devel-1.1.12-11.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-1.2.8-5.oe2403.aarch64.rpm", "name":"PackageKit-1.2.8-5.oe2403.aarch64.rpm" }, "name":"PackageKit-1.2.8-5.oe2403.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-command-not-found-1.2.8-5.oe2403.aarch64.rpm", "name":"PackageKit-command-not-found-1.2.8-5.oe2403.aarch64.rpm" }, "name":"PackageKit-command-not-found-1.2.8-5.oe2403.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-debuginfo-1.2.8-5.oe2403.aarch64.rpm", "name":"PackageKit-debuginfo-1.2.8-5.oe2403.aarch64.rpm" }, "name":"PackageKit-debuginfo-1.2.8-5.oe2403.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-debugsource-1.2.8-5.oe2403.aarch64.rpm", "name":"PackageKit-debugsource-1.2.8-5.oe2403.aarch64.rpm" }, "name":"PackageKit-debugsource-1.2.8-5.oe2403.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-devel-1.2.8-5.oe2403.aarch64.rpm", "name":"PackageKit-devel-1.2.8-5.oe2403.aarch64.rpm" }, "name":"PackageKit-devel-1.2.8-5.oe2403.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-gtk3-module-1.2.8-5.oe2403.aarch64.rpm", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403.aarch64.rpm" }, "name":"PackageKit-gtk3-module-1.2.8-5.oe2403.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-1.2.8-5.oe2403sp1.aarch64.rpm", "name":"PackageKit-1.2.8-5.oe2403sp1.aarch64.rpm" }, "name":"PackageKit-1.2.8-5.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.aarch64.rpm", "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.aarch64.rpm" }, "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.aarch64.rpm", "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.aarch64.rpm" }, "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-debugsource-1.2.8-5.oe2403sp1.aarch64.rpm", "name":"PackageKit-debugsource-1.2.8-5.oe2403sp1.aarch64.rpm" }, "name":"PackageKit-debugsource-1.2.8-5.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-devel-1.2.8-5.oe2403sp1.aarch64.rpm", "name":"PackageKit-devel-1.2.8-5.oe2403sp1.aarch64.rpm" }, "name":"PackageKit-devel-1.2.8-5.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.aarch64.rpm", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.aarch64.rpm" }, "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-1.2.8-5.oe2403sp3.aarch64.rpm", "name":"PackageKit-1.2.8-5.oe2403sp3.aarch64.rpm" }, "name":"PackageKit-1.2.8-5.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.aarch64.rpm", "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.aarch64.rpm" }, "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.aarch64.rpm", "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.aarch64.rpm" }, "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-debugsource-1.2.8-5.oe2403sp3.aarch64.rpm", "name":"PackageKit-debugsource-1.2.8-5.oe2403sp3.aarch64.rpm" }, "name":"PackageKit-debugsource-1.2.8-5.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-devel-1.2.8-5.oe2403sp3.aarch64.rpm", "name":"PackageKit-devel-1.2.8-5.oe2403sp3.aarch64.rpm" }, "name":"PackageKit-devel-1.2.8-5.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.aarch64.rpm", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.aarch64.rpm" }, "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-1.1.12-11.oe2003sp4.aarch64.rpm", "name":"PackageKit-1.1.12-11.oe2003sp4.aarch64.rpm" }, "name":"PackageKit-1.1.12-11.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.aarch64.rpm", "name":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.aarch64.rpm" }, "name":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.aarch64.rpm", "name":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.aarch64.rpm" }, "name":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-debugsource-1.1.12-11.oe2003sp4.aarch64.rpm", "name":"PackageKit-debugsource-1.1.12-11.oe2003sp4.aarch64.rpm" }, "name":"PackageKit-debugsource-1.1.12-11.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-devel-1.1.12-11.oe2003sp4.aarch64.rpm", "name":"PackageKit-devel-1.1.12-11.oe2003sp4.aarch64.rpm" }, "name":"PackageKit-devel-1.1.12-11.oe2003sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-1.1.12-11.oe2203sp4.src.rpm", "name":"PackageKit-1.1.12-11.oe2203sp4.src.rpm" }, "name":"PackageKit-1.1.12-11.oe2203sp4.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-1.2.8-5.oe2403.src.rpm", "name":"PackageKit-1.2.8-5.oe2403.src.rpm" }, "name":"PackageKit-1.2.8-5.oe2403.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-1.2.8-5.oe2403sp1.src.rpm", "name":"PackageKit-1.2.8-5.oe2403sp1.src.rpm" }, "name":"PackageKit-1.2.8-5.oe2403sp1.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-1.2.8-5.oe2403sp3.src.rpm", "name":"PackageKit-1.2.8-5.oe2403sp3.src.rpm" }, "name":"PackageKit-1.2.8-5.oe2403sp3.src.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-1.1.12-11.oe2003sp4.src.rpm", "name":"PackageKit-1.1.12-11.oe2003sp4.src.rpm" }, "name":"PackageKit-1.1.12-11.oe2003sp4.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-1.1.12-11.oe2203sp4.x86_64.rpm", "name":"PackageKit-1.1.12-11.oe2203sp4.x86_64.rpm" }, "name":"PackageKit-1.1.12-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.x86_64.rpm", "name":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.x86_64.rpm" }, "name":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.x86_64.rpm", "name":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.x86_64.rpm" }, "name":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-debugsource-1.1.12-11.oe2203sp4.x86_64.rpm", "name":"PackageKit-debugsource-1.1.12-11.oe2203sp4.x86_64.rpm" }, "name":"PackageKit-debugsource-1.1.12-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-devel-1.1.12-11.oe2203sp4.x86_64.rpm", "name":"PackageKit-devel-1.1.12-11.oe2203sp4.x86_64.rpm" }, "name":"PackageKit-devel-1.1.12-11.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-1.2.8-5.oe2403.x86_64.rpm", "name":"PackageKit-1.2.8-5.oe2403.x86_64.rpm" }, "name":"PackageKit-1.2.8-5.oe2403.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-command-not-found-1.2.8-5.oe2403.x86_64.rpm", "name":"PackageKit-command-not-found-1.2.8-5.oe2403.x86_64.rpm" }, "name":"PackageKit-command-not-found-1.2.8-5.oe2403.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-debuginfo-1.2.8-5.oe2403.x86_64.rpm", "name":"PackageKit-debuginfo-1.2.8-5.oe2403.x86_64.rpm" }, "name":"PackageKit-debuginfo-1.2.8-5.oe2403.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-debugsource-1.2.8-5.oe2403.x86_64.rpm", "name":"PackageKit-debugsource-1.2.8-5.oe2403.x86_64.rpm" }, "name":"PackageKit-debugsource-1.2.8-5.oe2403.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-devel-1.2.8-5.oe2403.x86_64.rpm", "name":"PackageKit-devel-1.2.8-5.oe2403.x86_64.rpm" }, "name":"PackageKit-devel-1.2.8-5.oe2403.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-gtk3-module-1.2.8-5.oe2403.x86_64.rpm", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403.x86_64.rpm" }, "name":"PackageKit-gtk3-module-1.2.8-5.oe2403.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-1.2.8-5.oe2403sp1.x86_64.rpm", "name":"PackageKit-1.2.8-5.oe2403sp1.x86_64.rpm" }, "name":"PackageKit-1.2.8-5.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.x86_64.rpm", "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.x86_64.rpm" }, "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.x86_64.rpm", "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.x86_64.rpm" }, "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-debugsource-1.2.8-5.oe2403sp1.x86_64.rpm", "name":"PackageKit-debugsource-1.2.8-5.oe2403sp1.x86_64.rpm" }, "name":"PackageKit-debugsource-1.2.8-5.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-devel-1.2.8-5.oe2403sp1.x86_64.rpm", "name":"PackageKit-devel-1.2.8-5.oe2403sp1.x86_64.rpm" }, "name":"PackageKit-devel-1.2.8-5.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.x86_64.rpm", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.x86_64.rpm" }, "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-1.2.8-5.oe2403sp3.x86_64.rpm", "name":"PackageKit-1.2.8-5.oe2403sp3.x86_64.rpm" }, "name":"PackageKit-1.2.8-5.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.x86_64.rpm", "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.x86_64.rpm" }, "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.x86_64.rpm", "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.x86_64.rpm" }, "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-debugsource-1.2.8-5.oe2403sp3.x86_64.rpm", "name":"PackageKit-debugsource-1.2.8-5.oe2403sp3.x86_64.rpm" }, "name":"PackageKit-debugsource-1.2.8-5.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-devel-1.2.8-5.oe2403sp3.x86_64.rpm", "name":"PackageKit-devel-1.2.8-5.oe2403sp3.x86_64.rpm" }, "name":"PackageKit-devel-1.2.8-5.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.x86_64.rpm", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.x86_64.rpm" }, "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-1.1.12-11.oe2003sp4.x86_64.rpm", "name":"PackageKit-1.1.12-11.oe2003sp4.x86_64.rpm" }, "name":"PackageKit-1.1.12-11.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.x86_64.rpm", "name":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.x86_64.rpm" }, "name":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.x86_64.rpm", "name":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.x86_64.rpm" }, "name":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-debugsource-1.1.12-11.oe2003sp4.x86_64.rpm", "name":"PackageKit-debugsource-1.1.12-11.oe2003sp4.x86_64.rpm" }, "name":"PackageKit-debugsource-1.1.12-11.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-devel-1.1.12-11.oe2003sp4.x86_64.rpm", "name":"PackageKit-devel-1.1.12-11.oe2003sp4.x86_64.rpm" }, "name":"PackageKit-devel-1.1.12-11.oe2003sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"PackageKit-help-1.1.12-11.oe2203sp4.noarch.rpm", "name":"PackageKit-help-1.1.12-11.oe2203sp4.noarch.rpm" }, "name":"PackageKit-help-1.1.12-11.oe2203sp4.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS" }, "product_id":"PackageKit-help-1.2.8-5.oe2403.noarch.rpm", "name":"PackageKit-help-1.2.8-5.oe2403.noarch.rpm" }, "name":"PackageKit-help-1.2.8-5.oe2403.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"PackageKit-help-1.2.8-5.oe2403sp1.noarch.rpm", "name":"PackageKit-help-1.2.8-5.oe2403sp1.noarch.rpm" }, "name":"PackageKit-help-1.2.8-5.oe2403sp1.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"PackageKit-help-1.2.8-5.oe2403sp3.noarch.rpm", "name":"PackageKit-help-1.2.8-5.oe2403sp3.noarch.rpm" }, "name":"PackageKit-help-1.2.8-5.oe2403sp3.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"PackageKit-help-1.1.12-11.oe2003sp4.noarch.rpm", "name":"PackageKit-help-1.1.12-11.oe2003sp4.noarch.rpm" }, "name":"PackageKit-help-1.1.12-11.oe2003sp4.noarch.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-1.1.12-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-1.1.12-11.oe2203sp4.aarch64", "name":"PackageKit-1.1.12-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-command-not-found-1.1.12-11.oe2203sp4.aarch64", "name":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-debuginfo-1.1.12-11.oe2203sp4.aarch64", "name":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-debugsource-1.1.12-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-debugsource-1.1.12-11.oe2203sp4.aarch64", "name":"PackageKit-debugsource-1.1.12-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-devel-1.1.12-11.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-devel-1.1.12-11.oe2203sp4.aarch64", "name":"PackageKit-devel-1.1.12-11.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-1.2.8-5.oe2403.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-1.2.8-5.oe2403.aarch64", "name":"PackageKit-1.2.8-5.oe2403.aarch64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-command-not-found-1.2.8-5.oe2403.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-command-not-found-1.2.8-5.oe2403.aarch64", "name":"PackageKit-command-not-found-1.2.8-5.oe2403.aarch64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-debuginfo-1.2.8-5.oe2403.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-debuginfo-1.2.8-5.oe2403.aarch64", "name":"PackageKit-debuginfo-1.2.8-5.oe2403.aarch64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-debugsource-1.2.8-5.oe2403.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-debugsource-1.2.8-5.oe2403.aarch64", "name":"PackageKit-debugsource-1.2.8-5.oe2403.aarch64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-devel-1.2.8-5.oe2403.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-devel-1.2.8-5.oe2403.aarch64", "name":"PackageKit-devel-1.2.8-5.oe2403.aarch64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-gtk3-module-1.2.8-5.oe2403.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-gtk3-module-1.2.8-5.oe2403.aarch64", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403.aarch64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-1.2.8-5.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-1.2.8-5.oe2403sp1.aarch64", "name":"PackageKit-1.2.8-5.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-command-not-found-1.2.8-5.oe2403sp1.aarch64", "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-debuginfo-1.2.8-5.oe2403sp1.aarch64", "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-debugsource-1.2.8-5.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-debugsource-1.2.8-5.oe2403sp1.aarch64", "name":"PackageKit-debugsource-1.2.8-5.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-devel-1.2.8-5.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-devel-1.2.8-5.oe2403sp1.aarch64", "name":"PackageKit-devel-1.2.8-5.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-gtk3-module-1.2.8-5.oe2403sp1.aarch64", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-1.2.8-5.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-1.2.8-5.oe2403sp3.aarch64", "name":"PackageKit-1.2.8-5.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-command-not-found-1.2.8-5.oe2403sp3.aarch64", "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-debuginfo-1.2.8-5.oe2403sp3.aarch64", "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-debugsource-1.2.8-5.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-debugsource-1.2.8-5.oe2403sp3.aarch64", "name":"PackageKit-debugsource-1.2.8-5.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-devel-1.2.8-5.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-devel-1.2.8-5.oe2403sp3.aarch64", "name":"PackageKit-devel-1.2.8-5.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-gtk3-module-1.2.8-5.oe2403sp3.aarch64", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-1.1.12-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-1.1.12-11.oe2003sp4.aarch64", "name":"PackageKit-1.1.12-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-command-not-found-1.1.12-11.oe2003sp4.aarch64", "name":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-debuginfo-1.1.12-11.oe2003sp4.aarch64", "name":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-debugsource-1.1.12-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-debugsource-1.1.12-11.oe2003sp4.aarch64", "name":"PackageKit-debugsource-1.1.12-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-devel-1.1.12-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-devel-1.1.12-11.oe2003sp4.aarch64", "name":"PackageKit-devel-1.1.12-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-1.1.12-11.oe2203sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-1.1.12-11.oe2203sp4.src", "name":"PackageKit-1.1.12-11.oe2203sp4.src as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-1.2.8-5.oe2403.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-1.2.8-5.oe2403.src", "name":"PackageKit-1.2.8-5.oe2403.src as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-1.2.8-5.oe2403sp1.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-1.2.8-5.oe2403sp1.src", "name":"PackageKit-1.2.8-5.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-1.2.8-5.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-1.2.8-5.oe2403sp3.src", "name":"PackageKit-1.2.8-5.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-1.1.12-11.oe2003sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-1.1.12-11.oe2003sp4.src", "name":"PackageKit-1.1.12-11.oe2003sp4.src as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-1.1.12-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-1.1.12-11.oe2203sp4.x86_64", "name":"PackageKit-1.1.12-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-command-not-found-1.1.12-11.oe2203sp4.x86_64", "name":"PackageKit-command-not-found-1.1.12-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-debuginfo-1.1.12-11.oe2203sp4.x86_64", "name":"PackageKit-debuginfo-1.1.12-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-debugsource-1.1.12-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-debugsource-1.1.12-11.oe2203sp4.x86_64", "name":"PackageKit-debugsource-1.1.12-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-devel-1.1.12-11.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-devel-1.1.12-11.oe2203sp4.x86_64", "name":"PackageKit-devel-1.1.12-11.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-1.2.8-5.oe2403.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-1.2.8-5.oe2403.x86_64", "name":"PackageKit-1.2.8-5.oe2403.x86_64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-command-not-found-1.2.8-5.oe2403.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-command-not-found-1.2.8-5.oe2403.x86_64", "name":"PackageKit-command-not-found-1.2.8-5.oe2403.x86_64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-debuginfo-1.2.8-5.oe2403.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-debuginfo-1.2.8-5.oe2403.x86_64", "name":"PackageKit-debuginfo-1.2.8-5.oe2403.x86_64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-debugsource-1.2.8-5.oe2403.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-debugsource-1.2.8-5.oe2403.x86_64", "name":"PackageKit-debugsource-1.2.8-5.oe2403.x86_64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-devel-1.2.8-5.oe2403.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-devel-1.2.8-5.oe2403.x86_64", "name":"PackageKit-devel-1.2.8-5.oe2403.x86_64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-gtk3-module-1.2.8-5.oe2403.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-gtk3-module-1.2.8-5.oe2403.x86_64", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403.x86_64 as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-1.2.8-5.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-1.2.8-5.oe2403sp1.x86_64", "name":"PackageKit-1.2.8-5.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-command-not-found-1.2.8-5.oe2403sp1.x86_64", "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-debuginfo-1.2.8-5.oe2403sp1.x86_64", "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-debugsource-1.2.8-5.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-debugsource-1.2.8-5.oe2403sp1.x86_64", "name":"PackageKit-debugsource-1.2.8-5.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-devel-1.2.8-5.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-devel-1.2.8-5.oe2403sp1.x86_64", "name":"PackageKit-devel-1.2.8-5.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-gtk3-module-1.2.8-5.oe2403sp1.x86_64", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-1.2.8-5.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-1.2.8-5.oe2403sp3.x86_64", "name":"PackageKit-1.2.8-5.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-command-not-found-1.2.8-5.oe2403sp3.x86_64", "name":"PackageKit-command-not-found-1.2.8-5.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-debuginfo-1.2.8-5.oe2403sp3.x86_64", "name":"PackageKit-debuginfo-1.2.8-5.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-debugsource-1.2.8-5.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-debugsource-1.2.8-5.oe2403sp3.x86_64", "name":"PackageKit-debugsource-1.2.8-5.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-devel-1.2.8-5.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-devel-1.2.8-5.oe2403sp3.x86_64", "name":"PackageKit-devel-1.2.8-5.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-gtk3-module-1.2.8-5.oe2403sp3.x86_64", "name":"PackageKit-gtk3-module-1.2.8-5.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-1.1.12-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-1.1.12-11.oe2003sp4.x86_64", "name":"PackageKit-1.1.12-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-command-not-found-1.1.12-11.oe2003sp4.x86_64", "name":"PackageKit-command-not-found-1.1.12-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-debuginfo-1.1.12-11.oe2003sp4.x86_64", "name":"PackageKit-debuginfo-1.1.12-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-debugsource-1.1.12-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-debugsource-1.1.12-11.oe2003sp4.x86_64", "name":"PackageKit-debugsource-1.1.12-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-devel-1.1.12-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-devel-1.1.12-11.oe2003sp4.x86_64", "name":"PackageKit-devel-1.1.12-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"PackageKit-help-1.1.12-11.oe2203sp4.noarch.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:PackageKit-help-1.1.12-11.oe2203sp4.noarch", "name":"PackageKit-help-1.1.12-11.oe2203sp4.noarch as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS", "product_reference":"PackageKit-help-1.2.8-5.oe2403.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS:PackageKit-help-1.2.8-5.oe2403.noarch", "name":"PackageKit-help-1.2.8-5.oe2403.noarch as a component of openEuler-24.03-LTS" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"PackageKit-help-1.2.8-5.oe2403sp1.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:PackageKit-help-1.2.8-5.oe2403sp1.noarch", "name":"PackageKit-help-1.2.8-5.oe2403sp1.noarch as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"PackageKit-help-1.2.8-5.oe2403sp3.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:PackageKit-help-1.2.8-5.oe2403sp3.noarch", "name":"PackageKit-help-1.2.8-5.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"PackageKit-help-1.1.12-11.oe2003sp4.noarch.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:PackageKit-help-1.1.12-11.oe2003sp4.noarch", "name":"PackageKit-help-1.1.12-11.oe2003sp4.noarch as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-41651", "notes":[ { "text":"PackageKit is a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction->cached_transaction_flags` combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction->cached_transaction_flags` without checking whether the transaction has already been authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:PackageKit-1.1.12-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:PackageKit-command-not-found-1.1.12-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:PackageKit-debuginfo-1.1.12-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:PackageKit-debugsource-1.1.12-11.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:PackageKit-devel-1.1.12-11.oe2203sp4.aarch64", "openEuler-24.03-LTS:PackageKit-1.2.8-5.oe2403.aarch64", "openEuler-24.03-LTS:PackageKit-command-not-found-1.2.8-5.oe2403.aarch64", "openEuler-24.03-LTS:PackageKit-debuginfo-1.2.8-5.oe2403.aarch64", "openEuler-24.03-LTS:PackageKit-debugsource-1.2.8-5.oe2403.aarch64", "openEuler-24.03-LTS:PackageKit-devel-1.2.8-5.oe2403.aarch64", "openEuler-24.03-LTS:PackageKit-gtk3-module-1.2.8-5.oe2403.aarch64", "openEuler-24.03-LTS-SP1:PackageKit-1.2.8-5.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:PackageKit-command-not-found-1.2.8-5.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:PackageKit-debuginfo-1.2.8-5.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:PackageKit-debugsource-1.2.8-5.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:PackageKit-devel-1.2.8-5.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:PackageKit-gtk3-module-1.2.8-5.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP3:PackageKit-1.2.8-5.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:PackageKit-command-not-found-1.2.8-5.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:PackageKit-debuginfo-1.2.8-5.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:PackageKit-debugsource-1.2.8-5.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:PackageKit-devel-1.2.8-5.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:PackageKit-gtk3-module-1.2.8-5.oe2403sp3.aarch64", "openEuler-20.03-LTS-SP4:PackageKit-1.1.12-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:PackageKit-command-not-found-1.1.12-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:PackageKit-debuginfo-1.1.12-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:PackageKit-debugsource-1.1.12-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:PackageKit-devel-1.1.12-11.oe2003sp4.aarch64", "openEuler-22.03-LTS-SP4:PackageKit-1.1.12-11.oe2203sp4.src", "openEuler-24.03-LTS:PackageKit-1.2.8-5.oe2403.src", "openEuler-24.03-LTS-SP1:PackageKit-1.2.8-5.oe2403sp1.src", "openEuler-24.03-LTS-SP3:PackageKit-1.2.8-5.oe2403sp3.src", "openEuler-20.03-LTS-SP4:PackageKit-1.1.12-11.oe2003sp4.src", "openEuler-22.03-LTS-SP4:PackageKit-1.1.12-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:PackageKit-command-not-found-1.1.12-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:PackageKit-debuginfo-1.1.12-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:PackageKit-debugsource-1.1.12-11.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:PackageKit-devel-1.1.12-11.oe2203sp4.x86_64", "openEuler-24.03-LTS:PackageKit-1.2.8-5.oe2403.x86_64", "openEuler-24.03-LTS:PackageKit-command-not-found-1.2.8-5.oe2403.x86_64", "openEuler-24.03-LTS:PackageKit-debuginfo-1.2.8-5.oe2403.x86_64", "openEuler-24.03-LTS:PackageKit-debugsource-1.2.8-5.oe2403.x86_64", "openEuler-24.03-LTS:PackageKit-devel-1.2.8-5.oe2403.x86_64", "openEuler-24.03-LTS:PackageKit-gtk3-module-1.2.8-5.oe2403.x86_64", "openEuler-24.03-LTS-SP1:PackageKit-1.2.8-5.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:PackageKit-command-not-found-1.2.8-5.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:PackageKit-debuginfo-1.2.8-5.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:PackageKit-debugsource-1.2.8-5.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:PackageKit-devel-1.2.8-5.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:PackageKit-gtk3-module-1.2.8-5.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP3:PackageKit-1.2.8-5.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:PackageKit-command-not-found-1.2.8-5.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:PackageKit-debuginfo-1.2.8-5.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:PackageKit-debugsource-1.2.8-5.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:PackageKit-devel-1.2.8-5.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:PackageKit-gtk3-module-1.2.8-5.oe2403sp3.x86_64", "openEuler-20.03-LTS-SP4:PackageKit-1.1.12-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:PackageKit-command-not-found-1.1.12-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:PackageKit-debuginfo-1.1.12-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:PackageKit-debugsource-1.1.12-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:PackageKit-devel-1.1.12-11.oe2003sp4.x86_64", "openEuler-22.03-LTS-SP4:PackageKit-help-1.1.12-11.oe2203sp4.noarch", "openEuler-24.03-LTS:PackageKit-help-1.2.8-5.oe2403.noarch", "openEuler-24.03-LTS-SP1:PackageKit-help-1.2.8-5.oe2403sp1.noarch", "openEuler-24.03-LTS-SP3:PackageKit-help-1.2.8-5.oe2403sp3.noarch", "openEuler-20.03-LTS-SP4:PackageKit-help-1.1.12-11.oe2003sp4.noarch" ] }, "remediations":[ { "product_ids":{ "$ref":"$.vulnerabilities[0].product_status.fixed" }, "details":"PackageKit security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2140" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version":"3.1" }, "products":{ "$ref":"$.vulnerabilities[0].product_status.fixed" } } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-41651" } ] }