[ALSA-2026:80497] Important: flatpak security update
Type:
security
Severity:
important
Release date:
2026-10-13
Description:
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fix(es): * flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616) * flatpak: flatpak: Arbitrary write access as root via extra-data extraction (CVE-2026-96275) * flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280) * flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer (CVE-2026-96808) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 flatpak-session-helper-1.12.9-4.el9_8.4.aarch64.rpm a9e753fb3fb17e5c8d3ec318d79db83e0a805e83720663e5cd7ed9179977703f
aarch64 flatpak-devel-1.12.9-4.el9_8.4.aarch64.rpm b7ef43a6e3b71be0f96e15ab11e33e77f864cba8434e93a6a3dca22696b55d49
aarch64 flatpak-libs-1.12.9-4.el9_8.4.aarch64.rpm f0d9832853615e8c5e3c4592d942c1e05cf77102fb00ad6a16980f0da906c432
aarch64 flatpak-1.12.9-4.el9_8.4.aarch64.rpm f4d2231eddd33ee52e6fa3949bd116160b5f36f5ad5eb8cf9be182c9ec03b6c6
i686 flatpak-session-helper-1.12.9-4.el9_8.4.i686.rpm 084c122f370c8dd6155b17d661d2982a5b55021f49e7fa6560e26305933ded0d
i686 flatpak-1.12.9-4.el9_8.4.i686.rpm 8e8294065ce8b37139323a9d89e085433c5c7439b5b47e339adc7cc2135b05b9
i686 flatpak-libs-1.12.9-4.el9_8.4.i686.rpm c4aa274f13ed27b4286268023cc94468fb212e5fb20dafdaf1427b286e0da771
i686 flatpak-devel-1.12.9-4.el9_8.4.i686.rpm d9509a4785bc6c378ff69635818457c4339c1f23613a0a192b8c9782848328d1
noarch flatpak-selinux-1.12.9-4.el9_8.4.noarch.rpm 9e712cfeb4f24f5cd4219a7bee38555aa6217a1b054683debde1d17c0a8f7a26
ppc64le flatpak-1.12.9-4.el9_8.4.ppc64le.rpm 497167ccef924f108db085f8037457b7a56a5f1cbaa2d42f69b522043846c45b
ppc64le flatpak-session-helper-1.12.9-4.el9_8.4.ppc64le.rpm 894f8fcf35d40724d2328a04a3feb3a77cd3a0f3aaf2eae3382e67ad5d6e6166
ppc64le flatpak-libs-1.12.9-4.el9_8.4.ppc64le.rpm 9dc83b913a03bf8f37de4935a0dc69d6e8176fedc4a59c0ee5c2f92e52d55d34
ppc64le flatpak-devel-1.12.9-4.el9_8.4.ppc64le.rpm cff32144581702e2cce3b0f04e6901d6ebfbdd0852b3e7cefd8d331fa2b6ace2
s390x flatpak-libs-1.12.9-4.el9_8.4.s390x.rpm 1bf41ca08e6ba17fae93b1605ad87837b496e888f16cd11ac5479d114bd0eae5
s390x flatpak-devel-1.12.9-4.el9_8.4.s390x.rpm 5398116c91f9ef200712f3dbf9edcbc2630b1397423cbc2df074c7aa023b2b20
s390x flatpak-session-helper-1.12.9-4.el9_8.4.s390x.rpm acf007df0f71b5253b431831ae8396090a43d72556357940b0cd48181366600b
s390x flatpak-1.12.9-4.el9_8.4.s390x.rpm ce3fa18b5a13e88964f150a316a4d97b481b76483815c6029e1d4874da8c6cc4
x86_64 flatpak-session-helper-1.12.9-4.el9_8.4.x86_64.rpm 10040f08e898d8c449aec6fe8dda17d8cf0e464338d4083c3e25497fb2ed5674
x86_64 flatpak-libs-1.12.9-4.el9_8.4.x86_64.rpm 7167ee4e575a3c10fa4aa20432c85656ba7acee9e56f932f1365a8b249142aca
x86_64 flatpak-1.12.9-4.el9_8.4.x86_64.rpm d7b236187a0884d6781ea3f403296d60aa3519c4420a5d1ece949944f0ba400a
x86_64 flatpak-devel-1.12.9-4.el9_8.4.x86_64.rpm e4bdb016e8ed36fd2ac85512d53da23c8ede4d545ebf82bbca388adb0ca3e48d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.