Release date:
2026-10-26 16:24:33 UTC
Description:
- CVE-2026-97024: fix arbitrary file write during runtime deploy, where a
malicious runtime with "files/etc" as a symlink made the path-based
passwd/group/machine-id/resolv.conf handling write at the symlink target
Updated packages:
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:8f56b16d2bdcd649d1d02c88ce46907c9d015cd1cbaa52cdd565f643802dd51d
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:aba441203a4a1d68558b666de60014c05c509cf34371aad29e327c1a45e85895
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:6c9fd4ef87f62ff5faecdbd78564bef2d42e0964eae3209aed364541a58ac396
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:7432d9e84ab6c40c07fb36019d77a0199a455284bc0b39ab5cf57fe203e4299f
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:ceddd2d08884da2984882b27cd6313ac1c45682f15f2de56319e111e130f0ff1
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:c56902eecdce177d748ee7f90e4d72c54cdf7200e8a483eec5f7c4f8d8b72eb3
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els3.i686.rpm
sha:b1e27013a61b2ff0e2b1a632a5f5d730e9457e77718c1defd63e34c000254920
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els3.x86_64.rpm
sha:e19838940ffa23b9b879650d3707f7726e17c522e607f562558ff353bd409a3f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
