ALSA-2026:80973

[ALSA-2026:80973] Important: flatpak-builder security update

Type:

security

Severity:

important

Release date:

2026-10-13

Description:

Flatpak-builder is a tool for building flatpaks from sources.  

Security Fix(es):  

  * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`) (CVE-2026-86320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	flatpak-builder-1.2.3-2.el8_10.aarch64.rpm	928508c30f3688a08b57044c21fc897d3bf78e6bf823b24406877a1c7687e4a4
ppc64le	flatpak-builder-1.2.3-2.el8_10.ppc64le.rpm	5e7e5df9712e0cec3fb060b54feff7f626b87c6d44827db6f441c2f563baa7ee
s390x	flatpak-builder-1.2.3-2.el8_10.s390x.rpm	3e7db7c856118d4e5ec50a2d305c2d39d144f062d755bd1860016b31d3807855
x86_64	flatpak-builder-1.2.3-2.el8_10.x86_64.rpm	2b3bb748d2d9baf559274a4c804438dfbb108065acf6523b1baf31d7cba85acb

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.