Oracle alert ELSA-2026-21755 (flatpak)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-21755 Important: Oracle Linux 9 flatpak security update | |
| Date: | Wed, 24 Jun 2026 18:09:53 -0700 | |
| Message-ID: | <mailman.61.1782349807.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-21755 http://linux.oracle.com/errata/ELSA-2026-21755.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: flatpak-1.12.9-4.el9_8.1.i686.rpm flatpak-1.12.9-4.el9_8.1.x86_64.rpm flatpak-devel-1.12.9-4.el9_8.1.i686.rpm flatpak-devel-1.12.9-4.el9_8.1.x86_64.rpm flatpak-libs-1.12.9-4.el9_8.1.i686.rpm flatpak-libs-1.12.9-4.el9_8.1.x86_64.rpm flatpak-selinux-1.12.9-4.el9_8.1.noarch.rpm flatpak-session-helper-1.12.9-4.el9_8.1.i686.rpm flatpak-session-helper-1.12.9-4.el9_8.1.x86_64.rpm aarch64: flatpak-1.12.9-4.el9_8.1.aarch64.rpm flatpak-devel-1.12.9-4.el9_8.1.aarch64.rpm flatpak-libs-1.12.9-4.el9_8.1.aarch64.rpm flatpak-selinux-1.12.9-4.el9_8.1.noarch.rpm flatpak-session-helper-1.12.9-4.el9_8.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/flatpak-1.12.9-4.... Related CVEs: CVE-2026-34078 CVE-2026-34079 Description of changes: [1.12.9-4.1] - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata