Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-16579

Высокий

ALT-PU-2026-16579: package flatpak-builder update to version 1.4.12-alt1

Источник
errata.altlinux.org
Дата публикации
07.10.2026
Дата обновления
07.10.2026
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades flatpak-builder to version 1.4.12-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 2 месяцев назад

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary code execution with the privileges of the user running flatpak-builder.

CVSS3: 7.8
redhat
3 месяца назад

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary code execution with the privileges of the user running flatpak-builder.

CVSS3: 7.8
nvd
около 2 месяцев назад

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary code execution with the privileges of the user running flatpak-builder.

CVSS3: 7.8
debian
около 2 месяцев назад

A flaw was found in flatpak-builder where Git hooks are not disabled w ...

rocky
26 дней назад

Important: flatpak-builder security update