[CLSA-2026:1777890711] flatpak: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-20 21:58:37 UTC
Description:
- CVE-2026-34079: fix arbitrary host file deletion via app-controlled ld.so cache symlink in flatpak_switch_symlink_and_remove
CVEs fixed:
Updated packages:
  • flatpak-1.0.9-13.el7_9.tuxcare.els4.i686.rpm
    sha:74175016a06b3f8e3788a9c9130c720cec45e04388379ca3ff2d1d10dcd6a131
  • flatpak-1.0.9-13.el7_9.tuxcare.els4.x86_64.rpm
    sha:29f2c8ac6b3477d36be831c078448363781ab8ae012594331cfa47134e3c5232
  • flatpak-builder-1.0.0-13.el7_9.tuxcare.els4.i686.rpm
    sha:b919e9c6121f206ca8f3b5f71c91c04cd4398bb2c941d599a3363af395f9c403
  • flatpak-builder-1.0.0-13.el7_9.tuxcare.els4.x86_64.rpm
    sha:9599e311bcdd393f5773f629652e31045de860eaf432fcd7017a5dee52b3da11
  • flatpak-devel-1.0.9-13.el7_9.tuxcare.els4.i686.rpm
    sha:d5dbdcb3d63cb78464fe8f9e321810fd83e7b62233550568a8b37967056ba5eb
  • flatpak-devel-1.0.9-13.el7_9.tuxcare.els4.x86_64.rpm
    sha:9449486630473185b7616a42049d662054e7953494ed7d2716a7b691d3d6ce8e
  • flatpak-libs-1.0.9-13.el7_9.tuxcare.els4.i686.rpm
    sha:cdac217d36bf26421213f70436f90eda473073c3f672623dcb3f7626fed1b7c2
  • flatpak-libs-1.0.9-13.el7_9.tuxcare.els4.x86_64.rpm
    sha:3f3d6d4919312dfa54fff6e0e39e10b093eace941a57e18ea0a0415286d22dbd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.