Release date:
2026-10-24 20:23:25 UTC
Description:
- CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious
ostree commit with "export" as a symlink made the path-based export/bin
cleanup delete files at the symlink target
Updated packages:
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:b0b6ea92ef400e2f884d674236a73b40c085d4851b8f1f00112c367a39d9dff2
-
flatpak-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:a5236f482f491086151c7507d711defc06475eb727d673f9f6ba1e34f3afba09
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:263ac8e5a14f9998eb54dba197127692550cbfc0d01b648676d75345b46ce5ff
-
flatpak-builder-1.0.0-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:44eabdd9cb05b210c34823b34a5946f1e7f5a820528098ff24368b1d1791c377
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:89e73ca1c4cd92a96557e57186dce7da5fdb97ac8a1b8bde940dcd387fa6bd19
-
flatpak-devel-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:7a11117754ea965aafd7cadf644017742675f736872c976cb87765ff51a2f495
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.i686.rpm
sha:1f7751623afb3ff116974865e6526d130f974eb5f1e7e994533afeb3a46de9dc
-
flatpak-libs-1.0.9-13.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:de30116c9490d4510c983e07eb3c3ca011a708a8d4a0577e9d83ff6e19528e1f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.