[CLSA-2026:1793886363] flatpak: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-05 13:46:16 UTC
Description:
- CVE-2026-92162: validate remote names and architecture arguments in flatpak-system-helper to prevent path traversal via a crafted arch - CVE-2023-28100: block the TIOCLINUX ioctl in the sandbox seccomp filter - CVE-2023-28101: escape special characters in displayed metadata and permissions, and reject them in --filesystem/--persist paths
Updated packages:
  • flatpak-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:1ee6afa997687097b0fa178663ef660548a13cc273231298759306b36a0e535b
  • flatpak-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:b8d1af7a71402750ef0925c6c8c455e31437e82a539783252a77c0f71119c27d
  • flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:4495cabbdf53f125d49c2158d6fba7272e1bbad25fef3352d3899e81d0d664bf
  • flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:7c9ca4415e82d0094ceb24bae65f5cf4993ba8c498ac77c1485dfd420756c402
  • flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:13c7fcd04f713d05d837d1ca5ec57eea19a70928786123962ff9c80436ce7d9f
  • flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:f0809a5cc6df9e97136e48df21f8837070b13582e82b122fa401e578843fe5d1
  • flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:1420a3254b0f4487e1e12493928d0317c44f13527330461b15ae1d509655c603
  • flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:1106fb78650bdc247c4e05897a3db89ae6971ae33bf12f4c733d7f9f47db9f60
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.