Description:
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
Security Fix(es):
* flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)
* flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
flatpak-devel-1.12.9-4.el9_8.6.aarch64.rpm |
ec7a755a64248f0fc7236cecce89c745fa99f2c95b9c1789b0345a68b73ca040 |
| i686 |
flatpak-devel-1.12.9-4.el9_8.6.i686.rpm |
045ee5f71ac5e416b37b2101586642436cb2db788edeb9cef401643e3eab1c2a |
| i686 |
flatpak-session-helper-1.12.9-4.el9_8.6.i686.rpm |
9f6332ad10d87231ef69e1ec8fa5c72474732808d374be2ad1972965ddb14df8 |
| i686 |
flatpak-1.12.9-4.el9_8.6.i686.rpm |
d309727f111b498a26ab66428bcf6a1cf95670eff5641462a6231a1f6e84aee1 |
| ppc64le |
flatpak-devel-1.12.9-4.el9_8.6.ppc64le.rpm |
60be70077b4204cf433cba605c625c26dc10ba68df8db0a23fd59bbf0955398a |
| s390x |
flatpak-devel-1.12.9-4.el9_8.6.s390x.rpm |
078b789ec2da239c7a39da64a382a7695bd5a02018f0d46e3eb97cea4e517afa |
| x86_64 |
flatpak-devel-1.12.9-4.el9_8.6.x86_64.rpm |
c34df9c36e679689ef29f73723fb0a5b1cb76b8d7d6c2dbf9d8a7ad80983e781 |
