[CLSA-2026:1792176855] flatpak: Fix of CVE-2026-96275
Type:
security
Severity:
Important
Release date:
2026-10-16 18:54:26 UTC
Description:
- CVE-2026-96275: validate extra-data names and use fd-relative operations for files/extra extraction and apply_extra handling to prevent path traversal
CVEs fixed:
Updated packages:
  • flatpak-1.12.9-4.el9_6.tuxcare.els7.aarch64.rpm
    sha:56dbf7efd794fc7d09c06f5aead6a9797d42423745e20eb55c649b15b64821fb
  • flatpak-1.12.9-4.el9_6.tuxcare.els7.i686.rpm
    sha:cd9bb6f7f0492c7a4e76ca66f93046fb3503ee093f8e7b535a3dc76a8928b178
  • flatpak-1.12.9-4.el9_6.tuxcare.els7.x86_64.rpm
    sha:95c3b846841b3cd860a4c14c7c6125e544b736b3c72e3a949daf13ab51444875
  • flatpak-devel-1.12.9-4.el9_6.tuxcare.els7.aarch64.rpm
    sha:053526b13b845b1941fa458c31c324933be78f5ee9a4afd1bcfbb61a6ddae2b0
  • flatpak-devel-1.12.9-4.el9_6.tuxcare.els7.i686.rpm
    sha:1deddfe0d257ae8f22aed85a67c3a11ab6650820489f2725a5d809309b3fd225
  • flatpak-devel-1.12.9-4.el9_6.tuxcare.els7.x86_64.rpm
    sha:2818ac4080b3cbae961d45deede823bd45e197ab0a9e717ab2ed61cbe35e8113
  • flatpak-libs-1.12.9-4.el9_6.tuxcare.els7.aarch64.rpm
    sha:4063dbbfb4631b4dc88a35455d7a86e4449dd674ae037f15c5de0cd39db8683d
  • flatpak-libs-1.12.9-4.el9_6.tuxcare.els7.i686.rpm
    sha:b899ce693e0222cafb140824f3f1f27979d4dcd14630d82dcfc23caff21d8363
  • flatpak-libs-1.12.9-4.el9_6.tuxcare.els7.x86_64.rpm
    sha:e67724aee0578425e211d250f064a307ee7f0836d52cc393f02e1bb93938daa0
  • flatpak-selinux-1.12.9-4.el9_6.tuxcare.els7.noarch.rpm
    sha:f1e93baa4b7c662d0b9d489607aa7c25167c9ab8ca17b43219b17d62d646a6ee
  • flatpak-session-helper-1.12.9-4.el9_6.tuxcare.els7.aarch64.rpm
    sha:f96d105e2e27506981a427240899b86a83befb7dbcf75cbcbc8d66fd38a25b54
  • flatpak-session-helper-1.12.9-4.el9_6.tuxcare.els7.i686.rpm
    sha:54cf068846a810475c52eff73eb928491a1d5c75c0d7b035b412e1cf367de8b3
  • flatpak-session-helper-1.12.9-4.el9_6.tuxcare.els7.x86_64.rpm
    sha:6b736357fb1dd3599043316f77d8143abc694c9ee5182dc8a30445a86cb6be10
  • flatpak-tests-1.12.9-4.el9_6.tuxcare.els7.aarch64.rpm
    sha:a4a034c98b4d8559286390e82795281fa653d167262e4a8247013eb2ff5c9c8e
  • flatpak-tests-1.12.9-4.el9_6.tuxcare.els7.i686.rpm
    sha:79433db462e042e1520c5bbe76c453cdfc260c426b35ae2b9f0ddcf228c3aed0
  • flatpak-tests-1.12.9-4.el9_6.tuxcare.els7.x86_64.rpm
    sha:49bc540e3dab7bb66f25264eea65abf327e4f09dfac5b5eb73add8c49763a22b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.