[CLSA-2026:1789577977] flatpak: Fix of CVE-2026-90616
Type:
security
Severity:
Important
Release date:
2026-09-19 00:51:08 UTC
Description:
- CVE-2026-90616: fix symlink-following sandbox escape in app data dir creation and /var bind mounts
CVEs fixed:
Updated packages:
  • flatpak-1.0.9-13.el7_9.tuxcare.els5.x86_64.rpm
    sha:a8e6603e3a17010f7c46103769c49746f8e47016a3fc3462e31364a9f454b16e
  • flatpak-builder-1.0.0-13.el7_9.tuxcare.els5.x86_64.rpm
    sha:70771876d7076a02af1c81288e76c4d81e245783226848282f0576174d78f2f2
  • flatpak-devel-1.0.9-13.el7_9.tuxcare.els5.x86_64.rpm
    sha:d43e0e2dc43f9946ccc86b2a7ca2edc8dc0f597a118774b6e6bc69e9addf1f43
  • flatpak-libs-1.0.9-13.el7_9.tuxcare.els5.x86_64.rpm
    sha:12c31a08a92c6787dddab039fade609ece45c4edbbee8d08c346ba2bc29f86b5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.