Release date:
2026-10-26 17:47:28 UTC
Description:
- CVE-2026-97024: fix arbitrary file write during runtime deploy, where a
malicious runtime with "files/etc" as a symlink made the path-based
passwd/group/machine-id/resolv.conf handling write at the symlink target
Updated packages:
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els3.aarch64.rpm
sha:1c691685ab6ca0812eb796b24f5c7fee15c1c00d008b3bcb38d70f73717b29a1
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:a96d89b6cdab009a8d77abad521c8052140783a325e226625847c2a8b3ed406d
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:9953a24508c460a4f9b274aa33ce581a2b82e0f9d47c2a0997c972f9282611af
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els3.aarch64.rpm
sha:9969eef91074e7c905e7af101e651cddcb24f8f823c7b257fbcd09c2ac7a0544
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:0f8e37e860571dcfadfa79a87e7dcf500837cdae23b6f0a508c04da20365a1d2
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:86f8c55bbcd3854d476b952f98f248169d62524fe4e50331ac801a91807e5561
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els3.aarch64.rpm
sha:88cbd93d3726eddc05c29971efda04f9c8375f55ba7c726e5e8307fa655e4bf7
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:0d632cc88f4989c686f756f9dc47967a51938f0a2a394fe69902b057f9920e3d
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:2097d3c6d3ddce71eb72e3af6c2b69d2015d589b8bfb4e04211263b1681c0a18
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els3.aarch64.rpm
sha:4fd3d35629a2ce7eff9aea1b5e74d83022c238ec22082a962f14ae67099a1970
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:9a208cae34e31cdf34181757d1b589867c8da4205d85492811b3f01fa67fec9a
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:508c3a60300784f28a6d5f2dad1b056d7f34f6a10ed06cfd2d86f17d06c70738
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
