Release date:
2026-10-23 15:33:50 UTC
Description:
- CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious
ostree commit with "export" as a symlink made the path-based export/bin
cleanup delete files at the symlink target
Updated packages:
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:0838b221492117f4a9d3c96f88927a9d2fe153a6097db74785c456ad8a52e993
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:4fa60ecbe459caf42978f8af16c8f87b0ee9441ad1b1c5a7523525bcf98caf70
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:fcb11f5c99774a64a9e9b3147e7de39737976ee4e0012347b637be24cb7419b3
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:82216a15ddb8a1951ae85f7fa5b69790a1ed4cc5b6e475a3c86fb8dbc85bdbcb
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:f79435cb4f90c453a78599d80c6b68202a05a50dd4fecf05b66e6b56cf1654c8
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:9323c3bf4d0f922e66dedbb80e789de87d3c4a091f68f9bbd9b8c04edc2eaf28
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:375ef192fc135c25e93ce3caa54e110722d457ce96647a29477ece55d320219c
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:53c835c90e5096bd1c7991803be5226cb9504f0bfecb6dbd266c9a5f85a2aa79
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
