{"id":"MGASA-2026-0477","summary":"Updated flatpak package fixes security vulnerabilities","details":"Arbitrary file deletion in root context via path traversal in deploy\ndirectory export/bin. (CVE-2026-97023)\nArbitrary write in root context via path traversal in deploy directory\nfiles/etc. (CVE-2026-97024)\nWorld-readable oci authentication token in system-helper cache path.\n(CVE-2026-97025)\nWorld-writable temporary child repositories in system-helper cache path.\n(CVE-2026-97026)\nDenial of service via unsanitized keys in exported desktop entry / d-bus\nservice files. (CVE-2026-97027)\nSandboxed app can signal unsandboxed processes in the same process\ngroup. (CVE-2026-97029)\n","modified":"2026-10-09T17:15:03.305195359Z","published":"2026-10-09T17:00:24Z","upstream":["CVE-2026-97023","CVE-2026-97024","CVE-2026-97025","CVE-2026-97026","CVE-2026-97027","CVE-2026-97029"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0477.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36401"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2026/09/28/6"},{"type":"ADVISORY","url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf"},{"type":"ADVISORY","url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54"},{"type":"ADVISORY","url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-7rvf-rqr3-43j4"},{"type":"ADVISORY","url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-r9w3-qx54-qvc8"},{"type":"ADVISORY","url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-v64f-hrwr-j4vh"},{"type":"ADVISORY","url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-f3p8-vr7v-gxf2"},{"type":"WEB","url":"https://lists.debian.org/debian-security-announce/2026/msg00437.html"}],"affected":[{"package":{"name":"flatpak","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/flatpak?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.6-1.2.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0477.json"}}],"schema_version":"1.9.0","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}