[ALSA-2026:80687] Important: flatpak security update
Type:
security
Severity:
important
Release date:
2026-10-12
Description:
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as root via extra-data extraction (CVE-2026-96275) * flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280) * flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer (CVE-2026-96808) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 flatpak-devel-1.12.9-7.el8_10.aarch64.rpm 3929414343996ff0b752c81e8d03eb5f96138f47fdd76759caebe655880cdb0e
aarch64 flatpak-1.12.9-7.el8_10.aarch64.rpm 7e13919f1cd8f4bb385cb76bd688e3e1e887b9efd5410ff8c29036f9bf0e3afd
aarch64 flatpak-session-helper-1.12.9-7.el8_10.aarch64.rpm 93c3f1a38b33a11e18343db5f748b1c2b02466b7624f1594f0d90477aa59a363
aarch64 flatpak-libs-1.12.9-7.el8_10.aarch64.rpm ebba26299aec39b8368fd8a465df1f5ff30f4769bf323817dc9a23f12cfd6d3d
i686 flatpak-libs-1.12.9-7.el8_10.i686.rpm 116848b2674618b79b7a9dbfd88af10133758c2021d5b6f22f63e6fa89a544cf
i686 flatpak-session-helper-1.12.9-7.el8_10.i686.rpm 417acfc0ed70834f30be14febf451b3266d44a605d2555630ad8c5a900360fae
i686 flatpak-devel-1.12.9-7.el8_10.i686.rpm 5dfe790eafd7fcc363e961cb2e288c02149fd1088cd4aca7d7295bffc5c04b9b
i686 flatpak-1.12.9-7.el8_10.i686.rpm b89ade624b4aca7945f32c99a05e8d9380d7dd76eaa9e9552c2fab18e6e3ba70
noarch flatpak-selinux-1.12.9-7.el8_10.noarch.rpm 1f4fdada8a1330a792aec0a6d9cab63761cbfbe129615b0a9dc82851e7941b41
ppc64le flatpak-1.12.9-7.el8_10.ppc64le.rpm 488f8eabadd0b83c1b33e7a71799d700a24e12900c30a594a9742b4ef32a4831
ppc64le flatpak-session-helper-1.12.9-7.el8_10.ppc64le.rpm 670b357409814f71ece03a63c96e4b0826b817c0e08aa1141f9904f9f0f5bcc5
ppc64le flatpak-libs-1.12.9-7.el8_10.ppc64le.rpm 69de56f66526a36a69a3c5965283f4a703a69c244adb26e68746628f9139b49b
ppc64le flatpak-devel-1.12.9-7.el8_10.ppc64le.rpm 88c81ae980c0b31e807c1972b69b3de22f91e8b6dcb35985caf2ef0d2a62116e
s390x flatpak-1.12.9-7.el8_10.s390x.rpm 5c2681ac038337ff6847d59a1408c12e1cd2c934934b09edb8d13feb443d74d5
s390x flatpak-libs-1.12.9-7.el8_10.s390x.rpm a12641350577499cc703157be29eb6ea9e0929415a76cf3884cb4df731b3f884
s390x flatpak-devel-1.12.9-7.el8_10.s390x.rpm b855a2a6c0bcb08631720b699338d7496d1c5d56867f379adc4763af63f6ef2c
s390x flatpak-session-helper-1.12.9-7.el8_10.s390x.rpm bcfdd8c4785f07ba965239784a7c22d8983b97bb7612556199d1bce22fb6772f
x86_64 flatpak-libs-1.12.9-7.el8_10.x86_64.rpm 1fe68280f12ed2ff4f7850b2688b8f3a8269093a423a48a8b2311e326ea26d67
x86_64 flatpak-1.12.9-7.el8_10.x86_64.rpm 96fcca8d743aa336ad95d63750e8fa64eb6c0ecca243754eb534d4402ceef2c5
x86_64 flatpak-devel-1.12.9-7.el8_10.x86_64.rpm aa8cc7c1f6f4ad5d2c5edc3bf89c71707b24996412839d932bcb700bbe9d9c88
x86_64 flatpak-session-helper-1.12.9-7.el8_10.x86_64.rpm be4f2a94dd2f4866e6d0ca5afa056aa3051596f8f98045a5fa581e9a39c5cbf4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.