Release date:
2026-10-23 15:36:44 UTC
Description:
- CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious
ostree commit with "export" as a symlink made the path-based export/bin
cleanup delete files at the symlink target
Updated packages:
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:21c984aaaf2013167260f55b7a85bb8e5d152f8b0f7f59c8141dc83e7221d4d5
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:0bf7f0f8091376c63778eecc852520c3c5e579096503c040c11291ce8ef482df
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:06b17452d98742e78ba10c4bf76397f7561044261727dee472b3778bfd886547
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:b01017ed46a6b2b5dab79cd86046958ca6caf91966476006a457ebb52053bb09
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:fdde93c7d3a4caaf9731df8507ca1788045b7f3ef473774808cb778d70391452
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:6e31d3977a4c5ac1110a43aced7cc49491a28a4307d7e6b59f9db1756e9d21e4
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:303d446e5029a68160ecad9493ae21b61836f91df3d19aa4f133d2837d3c6c48
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:8010a351301846b1c7a673b1d72b774d5def45b20d207f22e4164e40ead80021
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
