[CLSA-2026:1792626355] flatpak: Fix of CVE-2026-96280
Type:
security
Severity:
Important
Release date:
2026-10-21 23:46:11 UTC
Description:
- CVE-2026-96280: fix heap buffer overflow in OCI delta parsing by using gsize for delta sizes, rejecting oversized allocations and limiting delta paths to PATH_MAX
CVEs fixed:
Updated packages:
  • flatpak-1.12.7-2.el9_2.tuxcare.els11.aarch64.rpm
    sha:b6b33b687f47858b2d1914a056530846a13b2eda38e0b8ab03ef901e823d8b9e
  • flatpak-1.12.7-2.el9_2.tuxcare.els11.i686.rpm
    sha:3594060a51c50dda3a2063810d15471359cde744cc4db5829aea4e10ef5d79da
  • flatpak-1.12.7-2.el9_2.tuxcare.els11.x86_64.rpm
    sha:fb28b55e0e5984f97b365bff03bf1820c6d1dd9bd68dd5951fc8aae4e202e2b4
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els11.aarch64.rpm
    sha:7b5ffed1b67d22bd5e33ebc544fe13c0e3f693fbb77e969d66cd3a620e5192fb
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els11.i686.rpm
    sha:91769bb47d83c5a6e2e4dd7db80e872c6890df09214224b1e3f86ba303e6b288
  • flatpak-devel-1.12.7-2.el9_2.tuxcare.els11.x86_64.rpm
    sha:0379b01ae139218f8dd251baccd197877dbfaa5e5e05799dbfda37b13d9a376c
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els11.aarch64.rpm
    sha:499e6e7d6695b1181eb4addf6f98bc5a512d6893e6df269fdf605f1de8ab7818
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els11.i686.rpm
    sha:d965a483c98781fd7c112176d9169beda6aa05333a86a6ef13c724c37a6b6c80
  • flatpak-libs-1.12.7-2.el9_2.tuxcare.els11.x86_64.rpm
    sha:78333e4a95b4bc78face6faa8248ede89e17c009fce126a7efc3a50a7bcf1b51
  • flatpak-selinux-1.12.7-2.el9_2.tuxcare.els11.noarch.rpm
    sha:ceadcf7dec2afbb652f65926aad92276f1d232429e8ab92e47e43a4c90297052
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els11.aarch64.rpm
    sha:2338c5298edd3dde1fef7b60b3887711d8db7a752ef7978dfb45d2cfa13699d4
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els11.i686.rpm
    sha:0d31a69ebd88352250a64538dbb8e3174dc693e9a863ce5ffbcf947aca745325
  • flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els11.x86_64.rpm
    sha:fb32348026b9c94cdbb4fca5bbf195e6b6d26fd5aa6a349ced1c6d65617de826
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els11.aarch64.rpm
    sha:a5b5a0f4391cc3b7a25a49649e1f63a137a15f5b08bcbe56f02422e5c7499326
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els11.i686.rpm
    sha:0e572f8ecde105380028aad540a837ca8984ddcc601d3c5c915bdc77c2540875
  • flatpak-tests-1.12.7-2.el9_2.tuxcare.els11.x86_64.rpm
    sha:8cb7ee9ecf54c249cad86830a035d51cf96a4ef26cbc3b4834528f6d3d9ae87b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.