Release date:
2026-10-26 13:42:09 UTC
Description:
- CVE-2026-97024: fix arbitrary file write during runtime deploy, where a
malicious runtime with "files/etc" as a symlink made the path-based
passwd/group/machine-id/resolv.conf handling write at the symlink target
Updated packages:
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:8ccc9b2722e07bb461023f00049c5b541dcce26b77827f658f04fc8e4e319371
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:3557cee11ce0ace886b52c560d29d7589c872548a69d610d69523af200b81550
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:3eb603f78458c14f7075ffc11fec325ca66f08a025bb498fef5eb8685a26ef32
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:790b1852650b232a6f79a606615c05e57502d7bad0646c4eefc54389bbd5e247
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:4883ef2ddaa116d31d33e1652ffcf1fa176bf6de4ede1eb456d1acd799b804d5
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:be7caf7acf69e6541df2fe1bafc9e21ea566eafdbd7912536a98469eaf6c7ef8
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:484e23b2298f094bc4167aa73c3674513900d59bdaa1ae06bd0351ec4b63ae47
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:42388ebb93c2f30e2e19e49d901aa6c1c5acb5c45ca26edbd4272a97e745d3f9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
