Oracle Errata System Oracle Linux 5.11 2026-10-14T10:16:08 Oracle Linux 7 [1.12.9-4.0.1] - Restore the flatpak-builder 1.0.0 subpackage [Orabug: 40105180] - Move flatpak-session-helper back into flatpak [Orabug: 40105180] [1.12.9-4] - Import to OL7 [Orabug: 39695281] [1.12.9-4] - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165633 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170160 [1.12.9-3] - Fix previous changelog entry [1.12.9-2] - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 [1.12.9-1] - Update to 1.12.9 (CVE-2024-32462) [1.12.8-1] - Rebase to 1.12.8 (RHEL-4220) [1.10.8-3] - Let flatpak own %{_sysconfdir}/flatpak (RHEL-15822) [1.10.8-2] - Make sure to use the RHEL-lifetime supported Python and no other (RHEL-2225) [1.10.8-1] - Rebase to 1.10.8 (#2222103) - Fix CVE-2023-28100 and CVE-2023-28101 (#2180311) IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-34078 CVE-2026-34079 cpe:/a:oracle:linux:7:9:latest_ELS