[ALSA-2026:80495] Important: flatpak-builder security update
Type:
security
Severity:
important
Release date:
2026-10-14
Description:
Flatpak-builder is a tool for building flatpaks from sources. Security Fix(es): * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`) (CVE-2026-86320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 flatpak-builder-1.4.4-1.el10_2.1.aarch64.rpm acedfc5fe74373deeecac6bb00b5fb5d97839e4a3678bfa34cce39defbfdb2c9
ppc64le flatpak-builder-1.4.4-1.el10_2.1.ppc64le.rpm e57c03985544be4f054f955998dc6125f009e6c104e168f4448fd63d6568f6a9
s390x flatpak-builder-1.4.4-1.el10_2.1.s390x.rpm 72026f236d609b884f079c03a4a9225372aaf90bea72cddd02dd95da0164940b
x86_64 flatpak-builder-1.4.4-1.el10_2.1.x86_64.rpm 505d79d411b5a903b0e273aacf3cb6336fb048b98e567d2f857630b0807ae189
x86_64_v2 flatpak-builder-1.4.4-1.el10_2.1.x86_64_v2.rpm 40d0df5cebb8f95b6e7432906a6eaa83dbb23f7137fc86f25425febcfd2ed173
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.