Flatpak 1.18.4 fixes multiple security vulnerabilities
AI summary · glm-5.3Summaries by Vani AI
Flatpak 1.18.4 fixes multiple security vulnerabilities and hardens against symlink traversal issues tracked as CVE-2026-97023 and CVE-2026-97024.
Simon McVittie announced Flatpak 1.18.4, which fixes several security vulnerabilities in the Linux application sandboxing framework. The release improves hardening against symlink traversal issues related to CVE-2026-97023 and CVE-2026-97024. Linux desktop users and distributions should update to the latest 1.18.x release.
Key facts
- Flatpak 1.18.4 patches several security vulnerabilities
- Includes hardening against symlink traversal (CVE-2026-97023, CVE-2026-97024)
- Users and distros should update to latest 1.18.x release
- Organizations
- FlatpakSimon McVittie
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-97023 | Path Traversal in Flatpak export/bin Lets Malicious Apps Delete Files as Root | 7.1 | — | ||
| CVE-2026-97024 | Flatpak path traversal can empty or symlink host files | 7.1 | — |
From the original article
Posted by Simon McVittie on Sep 28 Flatpak 1. 18. 4 fixes several security vulnerabilties.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.