Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:89859

Опубликовано: 27 окт. 2026
Источник: rocky
Оценка: Important

Описание

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)

  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
flatpakaarch649.el8_10flatpak-1.12.9-9.el8_10.aarch64.rpm
flatpak-libsaarch649.el8_10flatpak-libs-1.12.9-9.el8_10.aarch64.rpm
flatpak-selinuxnoarch9.el8_10flatpak-selinux-1.12.9-9.el8_10.noarch.rpm
flatpak-session-helperaarch649.el8_10flatpak-session-helper-1.12.9-9.el8_10.aarch64.rpm
flatpakx86_649.el8_10flatpak-1.12.9-9.el8_10.x86_64.rpm
flatpak-libsi6869.el8_10flatpak-libs-1.12.9-9.el8_10.i686.rpm
flatpak-libsx86_649.el8_10flatpak-libs-1.12.9-9.el8_10.x86_64.rpm
flatpak-session-helperx86_649.el8_10flatpak-session-helper-1.12.9-9.el8_10.x86_64.rpm

Показывать по

Связанные CVE

CVE-2026-97023
CVE-2026-97024

Ссылки на источники

Исправления

Связанные уязвимости

rocky логотип

RLSA-2026:89850

rocky
13 дней назад

Important: flatpak security update

rocky логотип

RLSA-2026:89849

rocky
13 дней назад

Important: flatpak security update

oracle-oval логотип

ELSA-2026-89859

oracle-oval
14 дней назад

ELSA-2026-89859: flatpak security update (IMPORTANT)

oracle-oval логотип

ELSA-2026-89850

oracle-oval
14 дней назад

ELSA-2026-89850: flatpak security update (IMPORTANT)

oracle-oval логотип

ELSA-2026-89849

oracle-oval
14 дней назад

ELSA-2026-89849: flatpak security update (IMPORTANT)