Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:89849

Опубликовано: 27 окт. 2026
Источник: rocky
Оценка: Important

Описание

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)

  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
flatpakaarch649.el10_2.6flatpak-1.16.0-9.el10_2.6.aarch64.rpm
flatpak-libsaarch649.el10_2.6flatpak-libs-1.16.0-9.el10_2.6.aarch64.rpm
flatpak-session-helperaarch649.el10_2.6flatpak-session-helper-1.16.0-9.el10_2.6.aarch64.rpm
flatpak-selinuxnoarch9.el10_2.6flatpak-selinux-1.16.0-9.el10_2.6.noarch.rpm
flatpak-libsx86_649.el10_2.6flatpak-libs-1.16.0-9.el10_2.6.x86_64.rpm
flatpakx86_649.el10_2.6flatpak-1.16.0-9.el10_2.6.x86_64.rpm
flatpak-session-helperx86_649.el10_2.6flatpak-session-helper-1.16.0-9.el10_2.6.x86_64.rpm

Показывать по

Связанные CVE

CVE-2026-97023
CVE-2026-97024

Ссылки на источники

Исправления

Связанные уязвимости

rocky логотип

RLSA-2026:89859

rocky
13 дней назад

Important: flatpak security update

rocky логотип

RLSA-2026:89850

rocky
13 дней назад

Important: flatpak security update

oracle-oval логотип

ELSA-2026-89859

oracle-oval
14 дней назад

ELSA-2026-89859: flatpak security update (IMPORTANT)

oracle-oval логотип

ELSA-2026-89850

oracle-oval
14 дней назад

ELSA-2026-89850: flatpak security update (IMPORTANT)

oracle-oval логотип

ELSA-2026-89849

oracle-oval
14 дней назад

ELSA-2026-89849: flatpak security update (IMPORTANT)