[ALSA-2026:80498] Important: flatpak security update
Type:
security
Severity:
important
Release date:
2026-10-12
Description:
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as root via extra-data extraction (CVE-2026-96275) * flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280) * flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer (CVE-2026-96808) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 flatpak-devel-1.16.0-9.el10_2.4.aarch64.rpm 6ed93b850d9ddb50d7599714633a3ee1a95183b3c30ef673ddf1037974c13d9f
aarch64 flatpak-session-helper-1.16.0-9.el10_2.4.aarch64.rpm 79ddb4a39566a98c83e51a32cd7f8ec42793d549749d6245db2be1de01b85cd4
aarch64 flatpak-1.16.0-9.el10_2.4.aarch64.rpm d0c57a6d7fffa26c2577a31ab8712245e41b79f206c1b2b0bf25a45587adb89d
aarch64 flatpak-libs-1.16.0-9.el10_2.4.aarch64.rpm df6f98e184fa4be68af2226e05efb9785cd8be2f32b33a6c43d36a022023547b
noarch flatpak-selinux-1.16.0-9.el10_2.4.noarch.rpm 172e1711504e739522ae1206e914d28afb7a6412e2819c17a2f06a084ed5aec3
ppc64le flatpak-session-helper-1.16.0-9.el10_2.4.ppc64le.rpm 22419efca82bbfcbe69519bc36eefee7e7cb0344cbe6c264267a985c06276522
ppc64le flatpak-devel-1.16.0-9.el10_2.4.ppc64le.rpm 231e560845a961819858dea69d16152476dce642391619c4b4068929a6b87d3d
ppc64le flatpak-libs-1.16.0-9.el10_2.4.ppc64le.rpm 7cd9ec44afa425f097515c458db0a6a77797967f7ec0721df84ea56d521b66ae
ppc64le flatpak-1.16.0-9.el10_2.4.ppc64le.rpm 9ddfefb5d1eb7864bcb7bb593b7e1f844cc7b76f12e39ff1c36e5505d80360e2
s390x flatpak-1.16.0-9.el10_2.4.s390x.rpm 6f7b1e68f747db676fac5b332a99becb98f12faea2cc9c84a5bd011801d2f1b5
s390x flatpak-session-helper-1.16.0-9.el10_2.4.s390x.rpm 7b777114ada0e0d1fddf85474b360fc8def42f204339eb067652add62b407d5b
s390x flatpak-libs-1.16.0-9.el10_2.4.s390x.rpm c53e8819ec20361ef454a0d25ed40ec9c892c1e85c8487da1bb390025e1d68f0
s390x flatpak-devel-1.16.0-9.el10_2.4.s390x.rpm e8d9fb642fd3ce716767b07663ee89df21860ba19373d7d6b262666cbcda7aeb
x86_64 flatpak-1.16.0-9.el10_2.4.x86_64.rpm 2dd8417b1fdeb5de549774c97c4116e4a33ad86520e799d9988ef8bf8e2c9c2d
x86_64 flatpak-devel-1.16.0-9.el10_2.4.x86_64.rpm 696d2215cb53242d855f45f4ed25054cd511414c6084b2905948dad3ded1f2d8
x86_64 flatpak-libs-1.16.0-9.el10_2.4.x86_64.rpm df0847e84459ad73b05cf29ca33b1e0a591d94dc93cf1b1ed510a717e90a96c7
x86_64 flatpak-session-helper-1.16.0-9.el10_2.4.x86_64.rpm f2f21dcfacc1af558d7ebeb85b0890ad6468c8b53089444860acdee6866a5dfc
x86_64_v2 flatpak-devel-1.16.0-9.el10_2.4.x86_64_v2.rpm 6ecc66a075cdcc80020cb48b9415c8368fc305b5c8ed34369ae5c8cf9c32d93f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.