ELSA-2026-89850

ELSA-2026-89850 - flatpak security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-26

Description


[1.12.9-4.6]
- Use fd-relative operations for files/etc during runtime deploy (CVE-2026-97024)
Resolves: RHEL-272190

[1.12.9-4.5]
- Avoid path traversal deletion via deploy export/bin (CVE-2026-97023)
Resolves: RHEL-272030


Related CVEs


CVE-2026-97023
CVE-2026-97024

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) flatpak-1.12.9-4.el9_8.6.src.rpm6d010b07f552fb8769e69f32558df3facbf82edffbd91f1164c918c52d35be10-ol9_aarch64_appstream
flatpak-1.12.9-4.el9_8.6.src.rpm6d010b07f552fb8769e69f32558df3facbf82edffbd91f1164c918c52d35be10-ol9_aarch64_codeready_builder
flatpak-1.12.9-4.el9_8.6.aarch64.rpmf1ea9733c79e0ad4ed4fe33924cf18dbb4dbf12221927dfc57c9c1fc23a0a25e-ol9_aarch64_appstream
flatpak-devel-1.12.9-4.el9_8.6.aarch64.rpme4226bd029835d74a1ab1889b15c6b352b2f6eb04dc468dea4953cc45db79f66-ol9_aarch64_codeready_builder
flatpak-libs-1.12.9-4.el9_8.6.aarch64.rpm8ae9da0b16924e7bb3c195bd022660feacd94a9b43cbf07c9a4055d1b34e8c3e-ol9_aarch64_appstream
flatpak-selinux-1.12.9-4.el9_8.6.noarch.rpm40a9def0c6dd4a21a5985a84ab83cadb25ab0a8467d479c1b63bc5df65eb9ff8-ol9_aarch64_appstream
flatpak-session-helper-1.12.9-4.el9_8.6.aarch64.rpmeabed9adcc3bce01812435fd6000f3b93d2bb5db6b936f33b5dd62a3b6d7d283-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) flatpak-1.12.9-4.el9_8.6.src.rpm6d010b07f552fb8769e69f32558df3facbf82edffbd91f1164c918c52d35be10-ol9_x86_64_appstream
flatpak-1.12.9-4.el9_8.6.src.rpm6d010b07f552fb8769e69f32558df3facbf82edffbd91f1164c918c52d35be10-ol9_x86_64_codeready_builder
flatpak-1.12.9-4.el9_8.6.i686.rpm368a0e04305721cc06d19d94152038ae959dd19da9c8016862445a2fe403fb8e-ol9_x86_64_codeready_builder
flatpak-1.12.9-4.el9_8.6.x86_64.rpm951e362e09a344c0568e566ff9588d8fed8bac122497c6a99add23f3eaf0c71f-ol9_x86_64_appstream
flatpak-devel-1.12.9-4.el9_8.6.i686.rpm9acd716b5ed958096e7f6bc5be6a83f3bcf8f15bef6979edb2b1700720c5b3fb-ol9_x86_64_codeready_builder
flatpak-devel-1.12.9-4.el9_8.6.x86_64.rpme88b8a42ae300bd5d9696f3606bed45cd3415908bf2d7859608317c2604a6cdd-ol9_x86_64_codeready_builder
flatpak-libs-1.12.9-4.el9_8.6.i686.rpm5e211fc8b8a2dcee35d4910a867c672ceac80b8eccaefb1f5344a106d7142e9a-ol9_x86_64_appstream
flatpak-libs-1.12.9-4.el9_8.6.x86_64.rpmd8f4675f22aac01aed7cf0054593701637bbd20a8ff69519338d270bffdd3097-ol9_x86_64_appstream
flatpak-selinux-1.12.9-4.el9_8.6.noarch.rpm40a9def0c6dd4a21a5985a84ab83cadb25ab0a8467d479c1b63bc5df65eb9ff8-ol9_x86_64_appstream
flatpak-session-helper-1.12.9-4.el9_8.6.i686.rpm657b8992b84b9c58e5382ae13f0b0d258a349603b8fb640ec42bcea107629ad4-ol9_x86_64_codeready_builder
flatpak-session-helper-1.12.9-4.el9_8.6.x86_64.rpm2ddc65f90fb9848da842619a968cd13db45d39190e09d4b718b62891fdd92c6b-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete