[ALSA-2026:89849] Important: flatpak security update
Type:
security
Severity:
important
Release date:
2026-10-26
Description:
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023) * flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 flatpak-devel-1.16.0-9.el10_2.6.aarch64.rpm 1eaa525507a8a97702508e0124c836ddcf8adc8f00bd4531d6cfe66d31eb94d6
aarch64 flatpak-1.16.0-9.el10_2.6.aarch64.rpm 6e5f3cdf3bd5628ae979d45ce1b3ef2c4083f2b61ae7678fc3a127e726c8df2c
aarch64 flatpak-session-helper-1.16.0-9.el10_2.6.aarch64.rpm 778a087f3bc04f47df673559b9af143cb0c52338343e2394fb7c533665732ecf
aarch64 flatpak-libs-1.16.0-9.el10_2.6.aarch64.rpm 7e5e257e9ec72d05e5abf17b65cd535323c815c91bee3ac99ee226be1b4beb2c
noarch flatpak-selinux-1.16.0-9.el10_2.6.noarch.rpm e8f5924c313c7a69363f66973372e513ba795e103f28a155c48f7cd84048e981
ppc64le flatpak-libs-1.16.0-9.el10_2.6.ppc64le.rpm 0d754f2fbbad6a7622a553cc5ef8cd67a92331d1d3ac64b40b23820dea2b431b
ppc64le flatpak-1.16.0-9.el10_2.6.ppc64le.rpm 4e776fe545ba27f6539440b4369388d309610b6c7cfdebf37ab6d9fbdeb86232
ppc64le flatpak-devel-1.16.0-9.el10_2.6.ppc64le.rpm cdc56d8f50fa02987803dbdb52a6d78ea527ccd60c85bcdc309480718a4c670a
ppc64le flatpak-session-helper-1.16.0-9.el10_2.6.ppc64le.rpm d49c767ff05ab59e0cdfd9d014c1b33ff448c12585e168f570535b7594d76ca6
s390x flatpak-1.16.0-9.el10_2.6.s390x.rpm 6b81d213d69b7b6189520e1021899f26d36b952f7699b34fd660b682ab4953aa
s390x flatpak-session-helper-1.16.0-9.el10_2.6.s390x.rpm c5664463c134dd5ab591837df6e2b05201025a5df8c44e1e3b4332ed79a40cd6
s390x flatpak-libs-1.16.0-9.el10_2.6.s390x.rpm f1dc324659f135777788c7cfc9cf33a039218717697b861e0ac6b694c761970f
s390x flatpak-devel-1.16.0-9.el10_2.6.s390x.rpm f46d87e6435bc8abd34a6f6ea66e07d0b2b719d16605c0ddab2fedcf8ca331c9
x86_64 flatpak-session-helper-1.16.0-9.el10_2.6.x86_64.rpm 00073af174470722452f390428becc46854d0a4d4ccff5891398c36260bf33ae
x86_64 flatpak-devel-1.16.0-9.el10_2.6.x86_64.rpm 17f5482d8da63f31a3776073cebf61d7f3761dfb67e5244fbdb85feb021ed705
x86_64 flatpak-libs-1.16.0-9.el10_2.6.x86_64.rpm 8a4659cd8298570bf9502ef14f09dd143c089dd9ea1f3b57beca7d75d8c83422
x86_64 flatpak-1.16.0-9.el10_2.6.x86_64.rpm dcf0b9a4dcf049e0dd313b77b84984e9046cba874631a93c553261a16254d8a6
x86_64_v2 flatpak-session-helper-1.16.0-9.el10_2.6.x86_64_v2.rpm 35d99f1765a8f90c1d4de5dcf7c2c9fd2cd95ec60fcc51c78bf3bcd8e061cbdd
x86_64_v2 flatpak-1.16.0-9.el10_2.6.x86_64_v2.rpm 7d52c6522f3e4745d4460f1f5db076c7bcdeaa85dba59af8527d2c93975f7d72
x86_64_v2 flatpak-libs-1.16.0-9.el10_2.6.x86_64_v2.rpm c82317407b0f33da489144498e12954405dd48a57e736138790bfdc68fb649f9
x86_64_v2 flatpak-devel-1.16.0-9.el10_2.6.x86_64_v2.rpm f8ddc20f347b6b179e47491282b702636d2987a581bf1a1d148f35ded0201231
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.