Release date:
2026-10-25 22:52:31 UTC
Description:
- CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious
ostree commit with "export" as a symlink made the path-based export/bin
cleanup delete files at the symlink target
Updated packages:
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.aarch64.rpm
sha:033c096c2ae68f4b7a46e98a423497597254035e94865429ae76dbc8c3e332e3
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:b0d35e290077bb60e92be4facbddd347eda0dcce5ecb252d27bce2702271546f
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:1c901a5ba3a05fa00e5122df6e9b6fc794a9abaf277541aef5d2948676bdf1b4
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.aarch64.rpm
sha:e735a94cd4d8b1766c3ea15db205d3ff5e59a2a908da80bb99fef22cc4369cef
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:fdb015506d60ff00036300a64adcd9a600b9e9f69005e2621332a473a81681df
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:d25a544bca274df26bbd02a7f80fbc2b3dba8061839122f22f1015c07d9facc3
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.aarch64.rpm
sha:d8b29e9741f270a6544f2a5462cf919ecbff6c74b7ee8ef9dc3ae554dedc59f5
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:3a31359ff4cc55d3a8ddee551cc15db0b47091d8bbbe1f7103aa28a6a54cb5f9
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:e82bc9eb42e76cfd1647b405041568dd345aeff9766685049fd27516a3d1ec5b
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.aarch64.rpm
sha:6878ef72bc4fcce0a9927db504200ae23c235abad886bbe7bb2053889683b7d0
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:f07480ff222a5df11d368ee25c5b8b543ae4e159212fa64be055a33f013d7cd0
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:4b53529b7d85352104294c7cfd770a5035d98e7c997bb0ff2ce3f72a14e37b16
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
