ELSA-2026-89859

ELSA-2026-89859 - flatpak security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-26

Description


[1.12.9-9]
- Use fd-relative operations for files/etc during runtime deploy (CVE-2026-97024)
Resolves: RHEL-272181

[1.12.9-8]
- Avoid path traversal deletion via deploy export/bin (CVE-2026-97023)
Resolves: RHEL-272023


Related CVEs


CVE-2026-97023
CVE-2026-97024

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) flatpak-1.12.9-9.el8_10.src.rpmc7d6d3f60629506caf8e710e5cfecb14d69a76acf453f1651684cd1d1bf59eaa-ol8_aarch64_appstream
flatpak-1.12.9-9.el8_10.src.rpmc7d6d3f60629506caf8e710e5cfecb14d69a76acf453f1651684cd1d1bf59eaa-ol8_aarch64_codeready_builder
flatpak-1.12.9-9.el8_10.aarch64.rpm9b4c8423d2c4b82a48a13c464e305bc4680a0019d49a962f2118a67d8f04bfab-ol8_aarch64_appstream
flatpak-devel-1.12.9-9.el8_10.aarch64.rpm639b3a8464984d97173139ac615d921141f8a33a99637cab21b68ac765e334f4-ol8_aarch64_codeready_builder
flatpak-libs-1.12.9-9.el8_10.aarch64.rpm80319656602af3da108aef6b1e6294ee04bdec3ee7729c0849274531b70da403-ol8_aarch64_appstream
flatpak-selinux-1.12.9-9.el8_10.noarch.rpm84a63fd7356634314a7f069dabad536fda8e00a492c9efee3efd96030294685d-ol8_aarch64_appstream
flatpak-session-helper-1.12.9-9.el8_10.aarch64.rpm0600820b442933fe443cef34c7c8062254e38b8af4acdfefb7a7982b8cd9e5da-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) flatpak-1.12.9-9.el8_10.src.rpmc7d6d3f60629506caf8e710e5cfecb14d69a76acf453f1651684cd1d1bf59eaa-ol8_x86_64_appstream
flatpak-1.12.9-9.el8_10.src.rpmc7d6d3f60629506caf8e710e5cfecb14d69a76acf453f1651684cd1d1bf59eaa-ol8_x86_64_codeready_builder
flatpak-1.12.9-9.el8_10.i686.rpm2d70441aa29a1a423f3c1e5b0ce5d8a5743712d015920d928baaf5f009cae03a-ol8_x86_64_codeready_builder
flatpak-1.12.9-9.el8_10.x86_64.rpm6f8c5c9fa834382093a86051ce3d5ae5fb2a8827ddc05655d714ac9271787d07-ol8_x86_64_appstream
flatpak-devel-1.12.9-9.el8_10.i686.rpmb3aeb11adb1f8e7a4d8436a6e72b7f665ac13348cdd445830d57dbcb60f1bdbf-ol8_x86_64_codeready_builder
flatpak-devel-1.12.9-9.el8_10.x86_64.rpmd2969f3c8cbfe92a727a1f503e73acf1004003405eb70ccbeedcf302d0158ab3-ol8_x86_64_codeready_builder
flatpak-libs-1.12.9-9.el8_10.i686.rpm66b829e4d8970505536a89df00a2bf9bcd6a51fa3c279bd4072c3bce2bf4fe41-ol8_x86_64_appstream
flatpak-libs-1.12.9-9.el8_10.x86_64.rpm78564eb2dfe654b7948c41fc15c9b3b9eaee464c951637f24a7c1bffe6fed3a1-ol8_x86_64_appstream
flatpak-selinux-1.12.9-9.el8_10.noarch.rpm84a63fd7356634314a7f069dabad536fda8e00a492c9efee3efd96030294685d-ol8_x86_64_appstream
flatpak-session-helper-1.12.9-9.el8_10.i686.rpm7352de722a399b1267dea4db6636b6dff4a640577c87e92382b7809c5372e545-ol8_x86_64_codeready_builder
flatpak-session-helper-1.12.9-9.el8_10.x86_64.rpm70a2ecd3cfc4817887ac9ed4146d0b21ca7066a6d933b8d3ad0c0c19ac77e495-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete