[CLSA-2026:1791819150] flatpak: Fix of CVE-2026-96807
Type:
security
Severity:
Low
Release date:
2026-10-12 18:34:51 UTC
Description:
- CVE-2026-96807: harden regenerate_ld_cache and flatpak_switch_symlink_and_remove against .ld.so symlink attacks by using fd-based operations and bwrap --bind-fd
CVEs fixed:
Updated packages:
  • flatpak-1.12.7-2.el9_2.tuxcare.els9.aarch64.rpm
    sha:b345d07033b8d9cea3ba457babb1fa7b61fb4f095ab2e47a0d8251d64b4cad41
  • flatpak-1.12.7-2.el9_2.tuxcare.els9.i686.rpm
    sha:8a07ea42a0e4287130c4fd898aeeb11d1a59266ba254c60d01ee92b7ebc58f24
  • flatpak-1.12.7-2.el9_2.tuxcare.els9.x86_64.rpm
    sha:0266647cea2248293321401980b95eb16f3ea13376ee0f4a5bb582b30aac405f
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els9.aarch64.rpm
    sha:697276ed364dfac1234ec9b25dfd783179e3e28ac7b83b12685ee8664442cffe
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els9.i686.rpm
    sha:dcf2c3b60a9622912de57f535f899a67241d975659ceac6c8389415d8443dd91
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els9.x86_64.rpm
    sha:38fb9f82e9b26ca9f3723213695ae02864ee284e2aaf0b4449214ed27a3bed11
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els9.aarch64.rpm
    sha:1b56f0aa5c82588b52788af0d2f2ac701347da7839c22f4259b547758fe8093e
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els9.i686.rpm
    sha:187fbd542a8f41d15511c042c286bf458ca01890ee7fd59bbfd74da04ccb6606
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els9.x86_64.rpm
    sha:c4399ec54780d053f90e67a37af501fe91720308eb659a324107748f244d88a4
  • flatpak-selinux-1.12.7-2.el9_2.tuxcare.els9.noarch.rpm
    sha:0371629925efc63748cd5c64e534c9a07a90e6f5be7c50939acc213b798f9cf7
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els9.aarch64.rpm
    sha:f908d5221a1ed5498d1c28579863cd85ae80e610e8a60e6aa07ffd2ed54d0f0d
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els9.i686.rpm
    sha:931249a6b8be8ee1fdbcb0d16a377a90aead4cdedf4cd0d646173f292c5e746e
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els9.x86_64.rpm
    sha:4ea1f2f8d42ae4563118b2387e817d9db3775fd6799307fd1e22604d565dc0d1
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els9.aarch64.rpm
    sha:585bf7ab93db93ef7efc3e3533854d35c272085607aca5ba78ca18e7d1da6cf2
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els9.i686.rpm
    sha:48b074bec4162fb31f2a68298e8e801d2995cc9381094c8ea806892b504d3ca1
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els9.x86_64.rpm
    sha:47c5666b151144b9c0db9a5a501f3c03ac669af9c847cc285d43b29f56947359
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.