[ALSA-2026:89859] Important: flatpak security update
Type:
security
Severity:
important
Release date:
2026-10-26
Description:
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023) * flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 flatpak-devel-1.12.9-9.el8_10.aarch64.rpm 1225bb714c0de1b7abc785c1fa01cd9e2a869808e9a41d277d3d3817cafdae91
aarch64 flatpak-1.12.9-9.el8_10.aarch64.rpm 1f7f5d349fcdb3bb97b0fc9c0a0146977895ed1eb7c77263d1b6333655835abd
aarch64 flatpak-session-helper-1.12.9-9.el8_10.aarch64.rpm 6d592537956bc672054f8046634a3abef9b2644a209c888fb671d181e3f0135b
aarch64 flatpak-libs-1.12.9-9.el8_10.aarch64.rpm 9511cd3b186917a587008c022874ac48135425c5cfea672a7ea4161be442fc6f
i686 flatpak-session-helper-1.12.9-9.el8_10.i686.rpm 0c57262454903a34d9d1cc9531f343783895cf1a53ca6fc8bdc1b1738e20f29e
i686 flatpak-devel-1.12.9-9.el8_10.i686.rpm 101019df1193fc4e98c81775121198c4cb9a996edc7b34834815c62ca13fc6cc
i686 flatpak-libs-1.12.9-9.el8_10.i686.rpm 5d6c4cdd8392ebedd3f382eec8d42ff6a1d9bbe06ed348fb440dcc3d110927eb
i686 flatpak-1.12.9-9.el8_10.i686.rpm a9a4e73aa3af95397d432a212068eda2178b1d7539b6304615d33e13762cbd3d
noarch flatpak-selinux-1.12.9-9.el8_10.noarch.rpm f6cdccfb526f45f6f6c6dec6cde2606df9f4e5e5948a9778a65967afc7ab24b9
ppc64le flatpak-libs-1.12.9-9.el8_10.ppc64le.rpm 178d584e1533b79ba6af350f191f849b779fb740224f008e321896e03b134c49
ppc64le flatpak-session-helper-1.12.9-9.el8_10.ppc64le.rpm 6ebe186feb752e196ae06b4b383e971da152b4b037c108f85954afd8d2ca2434
ppc64le flatpak-1.12.9-9.el8_10.ppc64le.rpm 742d98678771d8a80250f121cf074d664c68434725cf1f3b0a1837c4a766f6c2
ppc64le flatpak-devel-1.12.9-9.el8_10.ppc64le.rpm af9c13498a2f25892fa53f0b9ff38e16fcc1677b6a78ff1e049175ac9e0b9fd7
s390x flatpak-session-helper-1.12.9-9.el8_10.s390x.rpm 4ea97b657ca296bcb83b013da3847dbf7f8b64ffceaf7f6f7d707ed5a1c04be0
s390x flatpak-devel-1.12.9-9.el8_10.s390x.rpm a8e355aec1cb7c178b2a4210865f19fc5d16c8b6b2de86af810cfe0b44288515
s390x flatpak-libs-1.12.9-9.el8_10.s390x.rpm bb7b591e81a9f4437aedd0dff7dd53f25fdf777075b29cf66a1f0aa9320e9d13
s390x flatpak-1.12.9-9.el8_10.s390x.rpm ef9ed636ee34f253cd5d08419c0fbf3b554d3ed72e7d51c86082792cc964b423
x86_64 flatpak-session-helper-1.12.9-9.el8_10.x86_64.rpm 99c5329b83a56fe217416532f8de950837b5cbb8f33a91b68e6aacaecc498cca
x86_64 flatpak-devel-1.12.9-9.el8_10.x86_64.rpm aa2fd26420aeaa377dade3015510e606b3e671250e78d8bbfea952b37c69f48a
x86_64 flatpak-1.12.9-9.el8_10.x86_64.rpm b8607c3e73a51b2e7676b092940c827003a4cc01ead58c78849d2aaae1680742
x86_64 flatpak-libs-1.12.9-9.el8_10.x86_64.rpm c12b36ea1fd6cd0753d306ae82fc6650e91d6aa41b3036ec57bbe1bf32c8f508
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.