Red Hat Enterprise Linux Flatpack: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Summary

Product

Vulnerabilities 2

• High 7.1
  CVE-2026-97023

  Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

  A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 28, 2026
• High 7.1
  CVE-2026-97024

  Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc

  A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (such as passwd, group, machine-id, or resolv.conf) to be emptied or replaced with a symlin…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 29, 2026

Revision history

1. 2026-11-11 #6

   Neue Updates von Red Hat aufgenommen

2. 2026-11-10 #5

   Neue Updates von Red Hat aufgenommen

3. 2026-11-04 #4

   Neue Updates von Red Hat aufgenommen

4. 2026-11-03 #3

   Neue Updates von Red Hat aufgenommen

5. 2026-10-26 #2

   Neue Updates von Oracle Linux aufgenommen

6. 2026-10-25 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:89849 vom 2026-10-25
  https://access.redhat.com/errata/RHSA-2026:89849
• Red Hat Security Advisory RHSA-2026:89850 vom 2026-10-25
  https://access.redhat.com/errata/RHSA-2026:89850
• Red Hat Security Advisory RHSA-2026:89859 vom 2026-10-26
  https://access.redhat.com/errata/RHSA-2026:89859
• Oracle Linux Security Advisory ELSA-2026-89850 vom 2026-10-26
  https://linux.oracle.com/errata/ELSA-2026-89850.html
• Oracle Linux Security Advisory ELSA-2026-89859 vom 2026-10-27
  https://linux.oracle.com/errata/ELSA-2026-89859.html
• Oracle Linux Security Advisory ELSA-2026-89849 vom 2026-10-27
  http://linux.oracle.com/errata/ELSA-2026-89849.html
• Rocky Linux Security Advisory RLSA-2026:89859 vom 2026-10-27
  https://errata.build.resf.org/RLSA-2026:89859
• Rocky Linux Security Advisory RLSA-2026:89850 vom 2026-10-27
  https://errata.build.resf.org/RLSA-2026:89850
• Rocky Linux Security Advisory RLSA-2026:89849 vom 2026-10-27
  https://errata.build.resf.org/RLSA-2026:89849
• Red Hat Security Advisory RHSA-2026:95063 vom 2026-11-04
  https://access.redhat.com/errata/RHSA-2026:95063
• Red Hat Security Advisory RHSA-2026:95062 vom 2026-11-04
  https://access.redhat.com/errata/RHSA-2026:95062
• Red Hat Security Advisory RHSA-2026:95064 vom 2026-11-04
  https://access.redhat.com/errata/RHSA-2026:95064
• Red Hat Security Advisory RHSA-2026:95061 vom 2026-11-04
  https://access.redhat.com/errata/RHSA-2026:95061
• Red Hat Security Advisory RHSA-2026:98595 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98595
• Red Hat Security Advisory RHSA-2026:98490 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98490