[CLSA-2026:1793793257] flatpak: Fix of CVE-2026-92162
Type:
security
Severity:
Important
Release date:
2026-11-06 10:42:05 UTC
Description:
- CVE-2026-92162: validate remote names and architecture arguments in flatpak-system-helper to prevent path traversal via a crafted arch - CVE-2023-28100: block the TIOCLINUX ioctl in the sandbox seccomp filter - CVE-2023-28101: escape special characters in displayed metadata and permissions, and reject them in --filesystem/--persist paths
CVEs fixed:
Updated packages:
  • flatpak-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:f4bae4278cf3781321547b32c613b044c1775e28644fc005693b56550c6bc413
  • flatpak-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:e7ce0bb2ef28f663aa0e0f3dec991ee142318fe3bd314d4a04941ab13d0bbaa3
  • flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:2d266dff0c20c301c7fe4496ea889464582bf12851ce8f7dbbaa1dace043e8b4
  • flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:6526527da297b30e53488b7371e854c299659c68aa8957c9de8e87f39f479049
  • flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:ca2bb3ef61423c44113028bb3c06410e3c17799098333951332e25cd65a5d54d
  • flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:87fa45279de014c507e3f6418f407514bd16ca0630768eff9bdd9684a0fabf99
  • flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:ec62b9453c50576fe9fbe4e49491b32546f7b6e7524f08cc208995aff8d27c50
  • flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:af619a3103f65d4f36d5a22f7e9bcff30a1ef0c685290c0b39a3c2b15e9350bb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.