Oracle alert ELSA-2026-21757 (flatpak)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-21757 Important: Oracle Linux 10 flatpak security update | |
| Date: | Fri, 17 Jul 2026 09:56:28 -0700 | |
| Message-ID: | <mailman.333.1784307401.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-21757 http://linux.oracle.com/errata/ELSA-2026-21757.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: flatpak-1.16.0-9.el10_2.1.x86_64.rpm flatpak-devel-1.16.0-9.el10_2.1.x86_64.rpm flatpak-libs-1.16.0-9.el10_2.1.x86_64.rpm flatpak-selinux-1.16.0-9.el10_2.1.noarch.rpm flatpak-session-helper-1.16.0-9.el10_2.1.x86_64.rpm aarch64: flatpak-1.16.0-9.el10_2.1.aarch64.rpm flatpak-devel-1.16.0-9.el10_2.1.aarch64.rpm flatpak-libs-1.16.0-9.el10_2.1.aarch64.rpm flatpak-selinux-1.16.0-9.el10_2.1.noarch.rpm flatpak-session-helper-1.16.0-9.el10_2.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/flatpak-1.16.0-9... Related CVEs: CVE-2026-34078 CVE-2026-34079 Description of changes: [1.16.0-9.1] - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata