ALT-PU-2026-16769

Высокий

ALT-PU-2026-16769: package flatpak update to version 1.18.4-alt1

Источник

errata.altlinux.org

Дата публикации

07.10.2026

Дата обновления

07.10.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades flatpak to version 1.18.4-alt1.

Устраненные уязвимости6

CVE-2026-97023

Высокий 7.1

Дата публикации: 28.09.2026

CWE-61

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

CVSS 3.1

Высокий 7.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: High

Ссылки

CVE-2026-97023 https://nvd.nist.gov/vuln/detail/CVE-2026-97023

Ссылки1

ALT-PU-2026-16769 https://errata.altlinux.org/ALT-PU-2026-16769

Связанные уязвимости

RLSA-2026:89859

rocky

13 дней назад

Important: flatpak security update

RLSA-2026:89850

rocky

13 дней назад

Important: flatpak security update

RLSA-2026:89849

rocky

13 дней назад

Important: flatpak security update

ELSA-2026-89859

oracle-oval

14 дней назад

ELSA-2026-89859: flatpak security update (IMPORTANT)

ELSA-2026-89850

oracle-oval

14 дней назад

ELSA-2026-89850: flatpak security update (IMPORTANT)