[CLSA-2026:1792149196] flatpak: Fix of CVE-2026-34078
Type:
security
Severity:
Critical
Release date:
2026-10-22 20:43:54 UTC
Description:
- CVE-2026-34078: fix remaining portal sandbox-expose mount-time race by passing O_PATH file descriptors to bwrap instead of paths
CVEs fixed:
Updated packages:
  • flatpak-1.0.9-13.el7_9.tuxcare.els6.i686.rpm
    sha:353102a5cbc33349abe2b416f8a9e18fac80a6d9b56e975567b773cae5505c4f
  • flatpak-1.0.9-13.el7_9.tuxcare.els6.x86_64.rpm
    sha:6041276b06cd1ebd0e9fab45fd7935758a7b15952996ac1a22c889aafe160c5d
  • flatpak-builder-1.0.0-13.el7_9.tuxcare.els6.i686.rpm
    sha:5a79007dcf5cb7bde1d0ec940db104942c9f64cf7c1ead7910874ae1e16af578
  • flatpak-builder-1.0.0-13.el7_9.tuxcare.els6.x86_64.rpm
    sha:098222afac7c59945c1b06ee0e55431cc7dd2dfea55d72a63db2f609f6389baf
  • flatpak-devel-1.0.9-13.el7_9.tuxcare.els6.i686.rpm
    sha:474d82adf7b0ab99e0dc2d6f19752aaafbb409e007263f5f9c3f6673d1616585
  • flatpak-devel-1.0.9-13.el7_9.tuxcare.els6.x86_64.rpm
    sha:29f7b0e87916e4652a054baf1bf4364a97281190905fe5c0c322a43cfc1e1f47
  • flatpak-libs-1.0.9-13.el7_9.tuxcare.els6.i686.rpm
    sha:497300d617814c9af56e74546f4873798200b7bfbfb766cb7b6e9edbfe74fde8
  • flatpak-libs-1.0.9-13.el7_9.tuxcare.els6.x86_64.rpm
    sha:aead21f7b8f527c9f0067cc26c62973cedb90590e8db0084d006e0c4e6e5314d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.