[CLSA-2026:1792190438] flatpak: Fix of CVE-2026-96275
Type:
security
Severity:
Important
Release date:
2026-10-16 22:40:47 UTC
Description:
- CVE-2026-96275: prevent extra-data path traversal by validating names and using fd-relative extraction and apply operations
CVEs fixed:
Updated packages:
  • flatpak-1.12.7-2.el9_2.tuxcare.els10.aarch64.rpm
    sha:1e277b09e12cac890f07a9f1ee1371b1ff57810cc86438a3c9edd3bd00423dd5
  • flatpak-1.12.7-2.el9_2.tuxcare.els10.i686.rpm
    sha:1cb0c7f6642aa8c70658e182e55e5302ab226722a9308f59fb0ab84bf7bec5c7
  • flatpak-1.12.7-2.el9_2.tuxcare.els10.x86_64.rpm
    sha:40cadf9cd80f71e51389cdffc585194f4c44140f69cffb254aaec4d863bdb944
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els10.aarch64.rpm
    sha:f29915cb2277b17e6b87ae5992f338f6c49f97f4986e1d42c76c4c6a8de3722b
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els10.i686.rpm
    sha:c02f5d5bf4aa6686efde8df338473689816ba3ecdc56d575b7ad977b768a94a2
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els10.x86_64.rpm
    sha:efc42e443ea6dd0641f43bea168bba55380eb1682faf6144470c87b301a94246
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els10.aarch64.rpm
    sha:9bc0dc3bad02fedf8fbf9ad36dbc2fd04ae49a3aea6c0da0fcd443b6103976b4
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els10.i686.rpm
    sha:71190725f5456add6b7dfbf759e3b45d120a1185cae6c560f5e171cd55115114
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els10.x86_64.rpm
    sha:aac000c741bea0dda78f79371574c0f377190eedfda72dd91dcabf5271ce8ce4
  • flatpak-selinux-1.12.7-2.el9_2.tuxcare.els10.noarch.rpm
    sha:352a160d6e4ce131609f5a5401a0b61b8275afe9799259fbe0f9d62f13b28349
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els10.aarch64.rpm
    sha:1fd1cd5a2d736fd764cc1f981c3f727a26f4f0519c47a2728c0bbf8fad56c4d4
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els10.i686.rpm
    sha:103258254a4bc76164b4428bb0a6a99c6da34f9d6a58b55ac15bb5b6172aec3d
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els10.x86_64.rpm
    sha:d93676f592036a38c42f6fc71094e92989ba63f11682e2eb4a84b8f87d76b6b6
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els10.aarch64.rpm
    sha:96111876cadfc01550394bd9e37f634257c405089386d6af67d0df2e1e28234c
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els10.i686.rpm
    sha:905171a1196dab0b7c577cd4a3d2b25cdafc32410ae16c98bc3868599f5a0298
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els10.x86_64.rpm
    sha:a9d857a3ce8ee5413f082a72fb99d052e34803943af33ff4cf5e20ce021956fc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.