Release date:
2026-10-29 17:58:48 UTC
Description:
- CVE-2026-96275: fix path traversal when extracting extra data, by refusing a
symlinked files/extra and rejecting extra-data names containing ".", ".." or
"/"
Updated packages:
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els4.aarch64.rpm
sha:c4a3af7c5812621ffd38ac992debd9314a346b3a705d4fabd914ab7f887cf0da
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els4.i686.rpm
sha:c1c2cc1b0832b8e2ca142c392be882de1f034f6e6e651d7f1641cf3c66e19470
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:ae4c94cf166b268251054503ab62ab4d264e67dd872f59c865a09e89acc223e9
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els4.aarch64.rpm
sha:b7fe72d61f90374e4c23a0bda2e2420489fc0f4be67f0233ad4765c7c05f43d3
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els4.i686.rpm
sha:ad26a8efc1f9c6c33fd292159201a918db57f20c9579203384c4c78863b13461
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:d2ffcab7765c69a024d79257d190def95dd3af2658c21d327c4c789937352e74
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els4.aarch64.rpm
sha:3f2e290d1b2f1bc32601d896263c3699ac8a30521fbde193e27f0d79dada8358
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els4.i686.rpm
sha:90e2b1e1abc45951cdcfc3d0b20fe977cf2703f22992da7b2d068aa4505efc44
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:9d83f4eecb353a1c9bc09734733e703d12b0e90c617aa766dff62e2fe6fc4d24
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els4.aarch64.rpm
sha:ef0a57e57dfa5d86f48d1dfac0d7c51855b635d40d95893fd5050f7bb87a9ea6
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els4.i686.rpm
sha:a486873a27924971d74818803d2c0b0ab89b0a72144542c34f9c3d35d87a462f
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:f6154c39357dde3db1f0e2e9931c3fb2237da5a14ee4daab2c02100c459b6992
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
