Description
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache directory. This allows Flatpak apps to delete arbitrary files on the host. This vulnerability is fixed in 1.16.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| flatpak | flatpak | < 1.16.4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | flatpak | 1.16.4-1 | — |
| Debian 13 | flatpak | 1.16.6-1~deb13u1 | — |
| Debian 12 | flatpak | 1.14.10-1~deb12u2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | flatpak | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | flatpak | 1.14.6-1ubuntu0.1+esm1 | USN-8741-1 |
| Ubuntu Pro 22.04 LTS | flatpak | 1.12.7-1ubuntu0.1+esm1 | USN-8741-1 |
| Ubuntu Pro 20.04 LTS | flatpak | 1.6.5-0ubuntu0.5+esm1 | USN-8741-1 |
| Ubuntu Pro 18.04 LTS | flatpak | 1.0.9-0ubuntu0.4+esm1 | USN-8741-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | flatpak +4 | 1.16.0-9.el10_2.1 | RHSA-2026:21757 |
| RHEL 9 | flatpak +4 | 1.12.9-4.el9_8.1 | RHSA-2026:21755 |
| RHEL 8 | flatpak +4 | 1.12.9-4.el8_10 | RHSA-2026:21756 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | flatpak +4 | 1.16.0-5.el10_0.2 | RHSA-2026:23420 |
| RHEL 9.6 EUS | flatpak +4 | 1.12.9-4.el9_6.1 | RHSA-2026:23418 |
| RHEL 9.4 E4S | flatpak +3 | 1.12.9-3.el9_4.1 | RHSA-2026:23417 |
| RHEL 9.2 E4S | flatpak +3 | 1.12.7-5.el9_2.1 | RHSA-2026:23419 |
| RHEL 8.8 TUS | flatpak +3 | 1.12.9-1.el8_8 | RHSA-2026:25068 |
| RHEL 8.8 E4S | flatpak +3 | 1.12.9-1.el8_8 | RHSA-2026:25068 |
| RHEL 8.6 EUS Long Life | flatpak +3 | 1.12.9-1.el8_6 | RHSA-2026:25381 |
| RHEL 8.6 AUS | flatpak +3 | 1.12.9-1.el8_6 | RHSA-2026:25381 |
| RHEL 8.4 EUS Long Life | flatpak +3 | 1.12.9-2.el8_4 | RHSA-2026:30901 |
| RHEL 8.4 AUS | flatpak +3 | 1.12.9-2.el8_4 | RHSA-2026:30901 |
| RHEL 7 ELS | flatpak +2 | 1.12.9-3.el7_9 | RHSA-2026:35843 |
| RHEL 7 ELS | flatpak-builder | 1.0.0-16.el7_9 | RHSA-2026:35843 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | flatpak +4 | 1.16.0-9.el10_2.1 | ALSA-2026:21757 |
| AlmaLinux 9 | flatpak +4 | 1.12.9-4.el9_8.1 | ALSA-2026:21755 |
| AlmaLinux 8 | flatpak +4 | 1.12.9-4.el8_10 | ALSA-2026:21756 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | flatpak | 1.16.0-9.el10_2.1 | RLSA-2026:21757 |
| Rocky Linux 9 | flatpak | 1.12.9-4.el9_8.1 | RLSA-2026:21755 |
| Rocky Linux 8 | flatpak | 1.12.9-4.el8_10 | RLSA-2026:21756 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | flatpak | 1.16.0-150600.3.9.1 | SUSE-SU-2026:1600-1 |
| SLES 15 SP6 | flatpak | 1.16.0-150600.3.9.1 | SUSE-SU-2026:1600-1 |
| SLES 15 SP5 | flatpak | 1.16.0-150500.3.18.1 | SUSE-SU-2026:5127-1, SUSE-SU-2026:1541-1 |
| SLES 15 SP4 | flatpak | 1.12.8-150400.3.12.1 | SUSE-SU-2026:1511-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | flatpak | 1.16.0-150600.3.9.1 | SUSE-SU-2026:1600-1 |
| SLES for SAP 15 SP5 | flatpak | 1.16.0-150500.3.18.1 | SUSE-SU-2026:5127-1, SUSE-SU-2026:1541-1 |
| SLES for SAP 15 SP4 | flatpak | 1.12.8-150400.3.12.1 | SUSE-SU-2026:1511-1 |
| SLE HPC 15 SP5 | flatpak | 1.16.0-150500.3.18.1 | SUSE-SU-2026:5127-1, SUSE-SU-2026:1541-1 |
| SLE HPC 15 SP4 | flatpak | 1.12.8-150400.3.12.1 | SUSE-SU-2026:1511-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | flatpak | 1.16.6-1.1 | openSUSE-SU-2026:10541-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | flatpak | 1.16.4-r0 | — |
| Alpine v3.23 | flatpak | 1.16.4-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | flatpak +5 | 1.16.6-1.amzn2023 | ALAS2023-2026-1601 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | flatpak +4 | 1.16.0-9.el10_2.1 | ELSA-2026-21757 |
| Oracle Linux 9 | flatpak +4 | 1.12.9-4.el9_8.1 | ELSA-2026-21755 |
| Oracle Linux 8 | flatpak +4 | 1.12.9-4.el8_10 | ELSA-2026-21756 |
| Oracle Linux 7 | flatpak +2 | 1.12.9-4.0.1.el7 | ELSA-2026-35843 |
| Oracle Linux 7 | flatpak-builder | 1.0.0-17.0.1.el7 | ELSA-2026-35843 |
Advisories 29
- WID-SEC-2026-1732 Red Hat Enterprise Linux (Flatpak): Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- SUSE-SU-2026:5127-1 Security update for flatpak SUSE / openSUSE Security Updates · Nov 7, 2026
- ALSA-2026:21755 Important: flatpak security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:21757 Important: flatpak security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:21756 Important: flatpak security update AlmaLinux Security Advisories · Oct 29, 2026
- ELSA-2026-35843 Important: flatpak security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 13, 2026
- USN-8741-1 flatpak vulnerabilities Ubuntu Security Notices (USN) · Sep 10, 2026
- ELSA-2026-21757 Important: flatpak security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 16, 2026
- RHSA-2026:35843 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:30901 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:25381 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:25068 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:23419 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:23420 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:23418 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:23417 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:21757 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:21755 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- RHSA-2026:21756 Red Hat Security Advisory: flatpak security update Red Hat Security Advisories (RHSA) · Jul 6, 2026
- ELSA-2026-21755 Important: flatpak security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 23, 2026
- RLSA-2026:21755 Important: flatpak security update Rocky Linux Security Advisories · Jun 5, 2026
- RLSA-2026:21757 Important: flatpak security update Rocky Linux Security Advisories · Jun 4, 2026
- RLSA-2026:21756 Important: flatpak security update Rocky Linux Security Advisories · May 29, 2026
- ELSA-2026-21756 Important: flatpak security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 28, 2026
- ALAS2023-2026-1601 Important: flatpak security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 30, 2026
- SUSE-SU-2026:1600-1 Security update for flatpak SUSE / openSUSE Security Updates · Apr 25, 2026
- SUSE-SU-2026:1541-1 Security update for flatpak SUSE / openSUSE Security Updates · Apr 23, 2026
- SUSE-SU-2026:1511-1 Security update for flatpak SUSE / openSUSE Security Updates · Apr 22, 2026
- openSUSE-SU-2026:10541-1 flatpak-1.16.6-1.1 on GA media SUSE / openSUSE Security Updates · Apr 15, 2026