{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Important"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"An update for flatpak is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","title":"Topic"},{"category":"general","text":"Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.\n\nSecurity Fix(es):\n\n* flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)\n\n* flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","title":"Details"},{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"https://access.redhat.com/errata/RHSA-2026:95061","url":"https://access.redhat.com/errata/RHSA-2026:95061"},{"category":"external","summary":"https://access.redhat.com/security/updates/classification/#important","url":"https://access.redhat.com/security/updates/classification/#important"},{"category":"external","summary":"2542625","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542625"},{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95061.json"}],"title":"Red Hat Security Advisory: flatpak security update","tracking":{"current_release_date":"2026-11-04T12:51:08+00:00","generator":{"date":"2026-11-04T12:51:08+00:00","engine":{"name":"Red Hat SDEngine","version":"5.4.4"}},"id":"RHSA-2026:95061","initial_release_date":"2026-11-04T11:51:07+00:00","revision_history":[{"date":"2026-11-04T11:51:07+00:00","number":"1","summary":"Initial version"},{"date":"2026-11-04T11:51:07+00:00","number":"2","summary":"Last updated version"},{"date":"2026-11-04T12:51:08+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux AppStream EUS (v.9.6)","product":{"name":"Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS","product_identification_helper":{"cpe":"cpe:/a:redhat:rhel_eus:9.6::appstream"}}},{"category":"product_name","name":"Red Hat CodeReady Linux Builder EUS (v.9.6)","product":{"name":"Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS","product_identification_helper":{"cpe":"cpe:/a:redhat:rhel_eus:9.6::crb"}}}],"category":"product_family","name":"Red Hat Enterprise Linux"},{"branches":[{"category":"product_version","name":"flatpak-0:1.12.9-4.el9_6.7.src","product":{"name":"flatpak-0:1.12.9-4.el9_6.7.src","product_id":"flatpak-0:1.12.9-4.el9_6.7.src","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak@1.12.9-4.el9_6.7?arch=src"}}}],"category":"architecture","name":"src"},{"branches":[{"category":"product_version","name":"flatpak-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak@1.12.9-4.el9_6.7?arch=aarch64"}}},{"category":"product_version","name":"flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs@1.12.9-4.el9_6.7?arch=aarch64"}}},{"category":"product_version","name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper@1.12.9-4.el9_6.7?arch=aarch64"}}},{"category":"product_version","name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debugsource@1.12.9-4.el9_6.7?arch=aarch64"}}},{"category":"product_version","name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debuginfo@1.12.9-4.el9_6.7?arch=aarch64"}}},{"category":"product_version","name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs-debuginfo@1.12.9-4.el9_6.7?arch=aarch64"}}},{"category":"product_version","name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper-debuginfo@1.12.9-4.el9_6.7?arch=aarch64"}}},{"category":"product_version","name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-tests-debuginfo@1.12.9-4.el9_6.7?arch=aarch64"}}},{"category":"product_version","name":"flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","product":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","product_id":"flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-devel@1.12.9-4.el9_6.7?arch=aarch64"}}}],"category":"architecture","name":"aarch64"},{"branches":[{"category":"product_version","name":"flatpak-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak@1.12.9-4.el9_6.7?arch=ppc64le"}}},{"category":"product_version","name":"flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs@1.12.9-4.el9_6.7?arch=ppc64le"}}},{"category":"product_version","name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper@1.12.9-4.el9_6.7?arch=ppc64le"}}},{"category":"product_version","name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debugsource@1.12.9-4.el9_6.7?arch=ppc64le"}}},{"category":"product_version","name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debuginfo@1.12.9-4.el9_6.7?arch=ppc64le"}}},{"category":"product_version","name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs-debuginfo@1.12.9-4.el9_6.7?arch=ppc64le"}}},{"category":"product_version","name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper-debuginfo@1.12.9-4.el9_6.7?arch=ppc64le"}}},{"category":"product_version","name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-tests-debuginfo@1.12.9-4.el9_6.7?arch=ppc64le"}}},{"category":"product_version","name":"flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","product":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","product_id":"flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-devel@1.12.9-4.el9_6.7?arch=ppc64le"}}}],"category":"architecture","name":"ppc64le"},{"branches":[{"category":"product_version","name":"flatpak-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak@1.12.9-4.el9_6.7?arch=s390x"}}},{"category":"product_version","name":"flatpak-libs-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-libs-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs@1.12.9-4.el9_6.7?arch=s390x"}}},{"category":"product_version","name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper@1.12.9-4.el9_6.7?arch=s390x"}}},{"category":"product_version","name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debugsource@1.12.9-4.el9_6.7?arch=s390x"}}},{"category":"product_version","name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debuginfo@1.12.9-4.el9_6.7?arch=s390x"}}},{"category":"product_version","name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs-debuginfo@1.12.9-4.el9_6.7?arch=s390x"}}},{"category":"product_version","name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper-debuginfo@1.12.9-4.el9_6.7?arch=s390x"}}},{"category":"product_version","name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-tests-debuginfo@1.12.9-4.el9_6.7?arch=s390x"}}},{"category":"product_version","name":"flatpak-devel-0:1.12.9-4.el9_6.7.s390x","product":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.s390x","product_id":"flatpak-devel-0:1.12.9-4.el9_6.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-devel@1.12.9-4.el9_6.7?arch=s390x"}}}],"category":"architecture","name":"s390x"},{"branches":[{"category":"product_version","name":"flatpak-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak@1.12.9-4.el9_6.7?arch=x86_64"}}},{"category":"product_version","name":"flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs@1.12.9-4.el9_6.7?arch=x86_64"}}},{"category":"product_version","name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper@1.12.9-4.el9_6.7?arch=x86_64"}}},{"category":"product_version","name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debugsource@1.12.9-4.el9_6.7?arch=x86_64"}}},{"category":"product_version","name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debuginfo@1.12.9-4.el9_6.7?arch=x86_64"}}},{"category":"product_version","name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs-debuginfo@1.12.9-4.el9_6.7?arch=x86_64"}}},{"category":"product_version","name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper-debuginfo@1.12.9-4.el9_6.7?arch=x86_64"}}},{"category":"product_version","name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-tests-debuginfo@1.12.9-4.el9_6.7?arch=x86_64"}}},{"category":"product_version","name":"flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","product":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","product_id":"flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-devel@1.12.9-4.el9_6.7?arch=x86_64"}}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_version","name":"flatpak-libs-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-libs-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs@1.12.9-4.el9_6.7?arch=i686"}}},{"category":"product_version","name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debugsource@1.12.9-4.el9_6.7?arch=i686"}}},{"category":"product_version","name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-debuginfo@1.12.9-4.el9_6.7?arch=i686"}}},{"category":"product_version","name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-libs-debuginfo@1.12.9-4.el9_6.7?arch=i686"}}},{"category":"product_version","name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper-debuginfo@1.12.9-4.el9_6.7?arch=i686"}}},{"category":"product_version","name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-tests-debuginfo@1.12.9-4.el9_6.7?arch=i686"}}},{"category":"product_version","name":"flatpak-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak@1.12.9-4.el9_6.7?arch=i686"}}},{"category":"product_version","name":"flatpak-devel-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-devel-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-devel@1.12.9-4.el9_6.7?arch=i686"}}},{"category":"product_version","name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","product":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","product_id":"flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-session-helper@1.12.9-4.el9_6.7?arch=i686"}}}],"category":"architecture","name":"i686"},{"branches":[{"category":"product_version","name":"flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","product":{"name":"flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","product_id":"flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/flatpak-selinux@1.12.9-4.el9_6.7?arch=noarch"}}}],"category":"architecture","name":"noarch"}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"flatpak-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-0:1.12.9-4.el9_6.7.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src"},"product_reference":"flatpak-0:1.12.9-4.el9_6.7.src","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-libs-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-libs-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-selinux-0:1.12.9-4.el9_6.7.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch"},"product_reference":"flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-devel-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-devel-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-devel-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","relates_to_product_reference":"CRB-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)","product_id":"CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"},"product_reference":"flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","relates_to_product_reference":"CRB-9.6.0.Z.EUS"}]},"vulnerabilities":[{"acknowledgments":[{"names":["Sebastian Wick"]}],"cve":"CVE-2026-97023","cwe":{"id":"CWE-61","name":"UNIX Symbolic Link (Symlink) Following"},"discovery_date":"2026-09-21T00:00:00+00:00","ids":[{"system_name":"Red Hat Bugzilla ID","text":"2542606"}],"notes":[{"category":"description","text":"A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.","title":"Vulnerability description"},{"category":"summary","text":"flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin","title":"Vulnerability summary"},{"category":"other","text":"Red Hat estimates the CVSSv3.1 vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H from provided CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N. The attack requires user interaction and does not cross a security boundary, meaning the scope is unchanged.","title":"Statement"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"fixed":["AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2026-97023"},{"category":"external","summary":"RHBZ#2542606","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542606"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2026-97023","url":"https://www.cve.org/CVERecord?id=CVE-2026-97023"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2026-97023","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97023"},{"category":"external","summary":"https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54","url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54"}],"release_date":"2026-09-28T13:29:04+00:00","remediations":[{"category":"vendor_fix","date":"2026-11-04T11:51:07+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"],"restart_required":{"category":"none"},"url":"https://access.redhat.com/errata/RHSA-2026:95061"},{"category":"workaround","details":"Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.","product_ids":["AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","version":"3.1"},"products":["AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"]}],"threats":[{"category":"impact","details":"Important"}],"title":"flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin"},{"acknowledgments":[{"names":["Sebastian Wick"]}],"cve":"CVE-2026-97024","cwe":{"id":"CWE-61","name":"UNIX Symbolic Link (Symlink) Following"},"discovery_date":"2026-09-28T13:29:18+00:00","ids":[{"system_name":"Red Hat Bugzilla ID","text":"2542625"}],"notes":[{"category":"description","text":"A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (such as passwd, group, machine-id, or resolv.conf) to be emptied or replaced with a symlink when the app is installed or upgraded. In system-wide installations, the write is performed as root.","title":"Vulnerability description"},{"category":"summary","text":"flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc","title":"Vulnerability summary"},{"category":"other","text":"Red Hat estimates the CVSSv3.1 vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H from provided CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N. The attack requires user interaction and does not cross a security boundary, meaning the scope is unchanged.","title":"Statement"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"fixed":["AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2026-97024"},{"category":"external","summary":"RHBZ#2542625","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542625"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2026-97024","url":"https://www.cve.org/CVERecord?id=CVE-2026-97024"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2026-97024","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97024"},{"category":"external","summary":"https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf","url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf"}],"release_date":"2026-09-28T13:29:18+00:00","remediations":[{"category":"vendor_fix","date":"2026-11-04T11:51:07+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"],"restart_required":{"category":"none"},"url":"https://access.redhat.com/errata/RHSA-2026:95061"},{"category":"workaround","details":"Avoid installing Flatpak apps from untrusted publishers, especially system-wide.","product_ids":["AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","version":"3.1"},"products":["AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.src","AppStream-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-selinux-0:1.12.9-4.el9_6.7.noarch","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","AppStream-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-debugsource-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-devel-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-libs-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-session-helper-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-session-helper-debuginfo-0:1.12.9-4.el9_6.7.x86_64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.aarch64","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.i686","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.ppc64le","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.s390x","CRB-9.6.0.Z.EUS:flatpak-tests-debuginfo-0:1.12.9-4.el9_6.7.x86_64"]}],"threats":[{"category":"impact","details":"Important"}],"title":"flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc"}]}