{"id":"CLSA-2026-1791735057","summary":"flatpak: Fix of CVE-2026-96807","details":"- CVE-2026-96807: regenerate_ld_cache() created and bind-mounted the\n  per-app .ld.so directory by path, and flatpak_switch_symlink_and_remove()\n  swapped its \"active\" symlink with path-based symlink()/rename()/unlink(),\n  so a sandboxed app could replace ~/.var/app/$APPID/.ld.so with a symlink\n  and have ld.so cache files written at an arbitrary host location;\n  regenerate_ld_cache() now opens the directory with\n  glnx_chase_and_mkdirat(), works on it with *at() syscalls and passes it\n  to bwrap with --bind-fd, and flatpak_switch_symlink_and_remove() takes\n  the directory fd and uses symlinkat()/renameat()/unlinkat()\n- Fix flatpak_switch_symlink_and_remove() returning -1 (truthy) instead of\n  FALSE on one error path","modified":"2026-10-26T09:31:36.693513639Z","published":"2026-10-11T16:11:07Z","upstream":["CVE-2026-96807"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1791735057.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96807"}],"affected":[{"package":{"name":"flatpak","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/flatpak?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.9-4.el9_6.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791735057.json"}},{"package":{"name":"flatpak-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/flatpak-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.9-4.el9_6.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791735057.json"}},{"package":{"name":"flatpak-libs","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/flatpak-libs?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.9-4.el9_6.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791735057.json"}},{"package":{"name":"flatpak-selinux","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/flatpak-selinux?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.9-4.el9_6.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791735057.json"}},{"package":{"name":"flatpak-session-helper","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/flatpak-session-helper?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.9-4.el9_6.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791735057.json"}},{"package":{"name":"flatpak-tests","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/flatpak-tests?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.9-4.el9_6.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791735057.json"}}],"schema_version":"1.9.0"}