[CLSA-2026:1793887215] flatpak: Fix of CVE-2026-92162
Type:
security
Severity:
Important
Release date:
2026-11-06 16:27:56 UTC
Description:
- CVE-2026-92162: validate remote names and architecture arguments in flatpak-system-helper to prevent path traversal via a crafted arch - CVE-2023-28100: block the TIOCLINUX ioctl in the sandbox seccomp filter - CVE-2023-28101: escape special characters in displayed metadata and permissions, and reject them in --filesystem/--persist paths
CVEs fixed:
Updated packages:
  • flatpak-1.0.9-13.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:24f441dc852c88145305e5a51dc73b439e4903c4b5c7689874fd448fec5d46a1
  • flatpak-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:fbde713c403a0fe26129f708adbd99741a9b211a44189d9cc91831229a9a6411
  • flatpak-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:70a26366ad887b1aaa9a395ce7e072480a229463fc05d7a828abd4ef364c0d2d
  • flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:110c496ac067a6a383548f28b03e1369d955a6caa12b7156de57b87fad351196
  • flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:737ba94eade57eb9c92bfee0c77773057c440c7dc9ad4785acd8d32c51224261
  • flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:997603f63f9ad85dc1ec352b59d34d122b5a4dd3fd90327dc6aa247d867cae7c
  • flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:8ad9dd3454f718cb74294feedf06b478f26e4ac1f2ca9aff442a1f27c2b40533
  • flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:14ddb6a8c18adb7c642105274ee15fe1e799dc0ee004a791cb733211b5e60845
  • flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:87f6d383f0be7ae42c71bbc4ae4afc04cbb121dcf2fa8934223dd113929f2bcb
  • flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:645f97a3ce18c53d1fa4e75d2996812af3997e021e902c94d131239f89bbbc7c
  • flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:229b2c1cd223516cce1263442b994d03d7bb435f3669235aec53efedb90fd79f
  • flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:8d60ef5763f05496474a35a0a3d1351921249d49e8e5e585e7a5059f5d74c89c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.