[ALSA-2026:80496] Important: flatpak-builder security update
Type:
security
Severity:
important
Release date:
2026-10-14
Description:
Flatpak-builder is a tool for building flatpaks from sources. Security Fix(es): * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`) (CVE-2026-86320) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 flatpak-builder-1.2.3-1.el9_8.1.aarch64.rpm f8f407cf5210310f43b03a041b10ad6909db5edba4546e1819acb5210d711497
ppc64le flatpak-builder-1.2.3-1.el9_8.1.ppc64le.rpm 6615c89a969698e1cadfd17658f3cd48c7a1b7cc4ae5fbc38c6865131866e43e
s390x flatpak-builder-1.2.3-1.el9_8.1.s390x.rpm 49abaf06c326fe8527ee5de33a070cd6c10da916425ef686ac6f2c1e6766d880
x86_64 flatpak-builder-1.2.3-1.el9_8.1.x86_64.rpm c7a960bfe44bfc0852d67080d82d7f25ad77d89be67384a936da56b4fef1316c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.