Release date:
2026-09-21 08:36:33 UTC
Description:
- CVE-2026-90616: fix sandbox escape via symlinked per-app data directories by
creating them with glnx_chase_and_mkdirat and binding /var/cache, /var/data,
/var/config and /var/tmp through chased fds
Updated packages:
-
flatpak-1.12.7-2.el9_2.tuxcare.els7.i686.rpm
sha:c417e29b222d267afff425e86e88221ef6e284b66d0563e440cb95e30fc20a9f
-
flatpak-1.12.7-2.el9_2.tuxcare.els7.x86_64.rpm
sha:712a67741e87e8cdb215d2ac5d124b10bde741b62649dfd84ca4470f8ee026b1
-
flatpak-devel-1.12.7-2.el9_2.tuxcare.els7.i686.rpm
sha:b84c49709201b748d74a306ba466ce499a2339752731229dccbaa65253615eca
-
flatpak-devel-1.12.7-2.el9_2.tuxcare.els7.x86_64.rpm
sha:b6e598be89e39d0421fcf5bca43c50c72ddba6553b0e9245cc33db5da81a169b
-
flatpak-libs-1.12.7-2.el9_2.tuxcare.els7.i686.rpm
sha:ace1f225859096adbf15f5de2c2003d7f41d4d6803627fd9246743d6c0b7543e
-
flatpak-libs-1.12.7-2.el9_2.tuxcare.els7.x86_64.rpm
sha:48bf48075cf5faaba99992a0e00c414d0d8f418ed1ea307658988170ca11308c
-
flatpak-selinux-1.12.7-2.el9_2.tuxcare.els7.noarch.rpm
sha:6908ce3fdef0f8f562dea0c2e639f17938e41b86c5bb27a224257a03cf53eaa7
-
flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els7.i686.rpm
sha:779aa0faebf2d5394b8aa297e39cbd561d653c93922ee82a4b5b477c90c3a1cf
-
flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els7.x86_64.rpm
sha:ae753c6ab44e9eace0be1f74b3763469100ae1d735829672b77d389b2049c02e
-
flatpak-tests-1.12.7-2.el9_2.tuxcare.els7.x86_64.rpm
sha:9c98892ba09c340acb91046a5d0bb786c2b6b1a88c07b270aed61dd67b43f07f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
