Alerts This Week
Warning Icon 1 1,129
Alerts This Week
Warning Icon 1 1,129

Oracle Linux 9 Flatpak Important Code Execution Advisory ELSA-2026-21755

oracle
Calendar Grey June 24, 2026
Oracle Linux Logo Esm H88
Oracle Linux 9 advisory provides updates for Flatpak addressing code execution risks with important fixes.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[1.12.9-4.1] - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171

Topics%20covered

Topics Covered

security advisory arbitrary code execution important Oracle flatpak arbitrary file deletion

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates/flatpak-1.12.9-4.el9_8.1.src.rpm

x86_64

flatpak-1.12.9-4.el9_8.1.i686.rpm flatpak-1.12.9-4.el9_8.1.x86_64.rpm flatpak-devel-1.12.9-4.el9_8.1.i686.rpm flatpak-devel-1.12.9-4.el9_8.1.x86_64.rpm flatpak-libs-1.12.9-4.el9_8.1.i686.rpm flatpak-libs-1.12.9-4.el9_8.1.x86_64.rpm flatpak-selinux-1.12.9-4.el9_8.1.noarch.rpm flatpak-session-helper-1.12.9-4.el9_8.1.i686.rpm flatpak-session-helper-1.12.9-4.el9_8.1.x86_64.rpm

aarch64

flatpak-1.12.9-4.el9_8.1.aarch64.rpm flatpak-devel-1.12.9-4.el9_8.1.aarch64.rpm flatpak-libs-1.12.9-4.el9_8.1.aarch64.rpm flatpak-selinux-1.12.9-4.el9_8.1.noarch.rpm flatpak-session-helper-1.12.9-4.el9_8.1.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-34078 CVE-2026-34079

Topics%20covered

Topics Covered

security advisory arbitrary code execution important Oracle flatpak arbitrary file deletion

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here