[Git][security-tracker-team/security-tracker][master] more flatpak issues CVEfied
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Sep 23 07:55:19 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b6694ab4 by Moritz Muehlenhoff at 2026-09-23T08:53:24+02:00
more flatpak issues CVEfied
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -56376,9 +56376,8 @@ CVE-2026-XXXX [GHSA-qrwq-7qwx-q9rp]
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/4d1eb212237069681b1f994e2b5b61e40015050f (branch flatpak-1.16.x)
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/076f77a4775490b2aef43f4e01eeee9aa965bd21 (branch flatpak-1.16.x)
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/769ad563bae82b948496a7edffa5eb3f71d0cc72 (branch flatpak-1.16.x)
-CVE-2026-XXXX [GHSA-fqx6-vh4p-42cg]
+CVE-2026-96275 [GHSA-fqx6-vh4p-42cg]
- flatpak 1.18.1-1 (bug #1144130)
- [trixie] - flatpak 1.16.6-1~deb13u2
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-fqx6-vh4p-42cg
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/c42326c74d63e550d874312be0c7a800cf5fc39f (1.18.1)
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/12a30ecb422b1e1246cb2d9af60c14ef7b8f22a4 (1.18.1)
@@ -56392,9 +56391,8 @@ CVE-2026-XXXX [GHSA-fqx6-vh4p-42cg]
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/de3decabfd2bc62a774698342d1a9e8ea98077d7 (branch flatpak-1.16.x)
NOTE: Additional requirement: https://github.com/flatpak/flatpak/commit/3d43a0f5fa602cc3edc557d8ab835030140792b1 (branch flatpak-1.16.x)
NOTE: Additional requirement: https://github.com/flatpak/flatpak/commit/68c12b9695eee4a94d896f0cf2f388f0d3c63df1 (branch flatpak-1.16.x)
-CVE-2026-XXXX [GHSA-8qxj-x646-phcm]
+CVE-2026-96276 [GHSA-8qxj-x646-phcm]
- flatpak 1.18.1-1 (bug #1144130)
- [trixie] - flatpak 1.16.6-1~deb13u2
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-8qxj-x646-phcm
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/c42326c74d63e550d874312be0c7a800cf5fc39f (1.18.1)
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/12a30ecb422b1e1246cb2d9af60c14ef7b8f22a4 (1.18.1)
@@ -56404,7 +56402,7 @@ CVE-2026-XXXX [GHSA-8qxj-x646-phcm]
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/619e75e7e453697b3f1d50d84e116e4df3d15df6 (branch flatpak-1.16.x)
NOTE: Additional requirement: https://github.com/flatpak/flatpak/commit/3d43a0f5fa602cc3edc557d8ab835030140792b1 (branch flatpak-1.16.x)
NOTE: Additional requirement: https://github.com/flatpak/flatpak/commit/68c12b9695eee4a94d896f0cf2f388f0d3c63df1 (branch flatpak-1.16.x)
-CVE-2026-XXXX [GHSA-9rww-v4mm-x4jg]
+CVE-2026-96279 [GHSA-9rww-v4mm-x4jg]
- flatpak 1.18.1-1 (bug #1144130)
[trixie] - flatpak <not-affected> (Vulnerable code not present)
[bookworm] - flatpak <not-affected> (Vulnerable code not present)
@@ -56422,9 +56420,8 @@ CVE-2026-92162 [GHSA-v2gw-v9h5-9q4x]
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/3716e0761ece68405d0a49328f7c74cb14f4a245 (branch flatpak-1.16.x)
NOTE: Additional tests: https://github.com/flatpak/flatpak/commit/e52c97fc2f307f695f5db16d8a5ba44b23d1d894 (branch flatpak-1.16.x)
NOTE: Test workaround for old meson: https://github.com/flatpak/flatpak/pull/6768
-CVE-2026-XXXX [GHSA-jr92-2v97-wgvc]
+CVE-2026-96280 [GHSA-jr92-2v97-wgvc]
- flatpak 1.18.1-1 (bug #1144130)
- [trixie] - flatpak 1.16.6-1~deb13u2
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-jr92-2v97-wgvc
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/892d261255449d0cd5d97f6a8f2a731e566ff913 (1.18.1)
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/c52e851f3f5036b132321c19b3c0102aabda9a3a (1.18.1)
@@ -56444,9 +56441,8 @@ CVE-2026-XXXX [GHSA-99wv-m8rp-g58x]
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/aa35286d1f8ca5ab04de01560aaef349108cc356 (branch flatpak-1.16.x)
NOTE: Additional requirement: https://github.com/flatpak/flatpak/commit/3d43a0f5fa602cc3edc557d8ab835030140792b1 (branch flatpak-1.16.x)
NOTE: Additional requirement: https://github.com/flatpak/flatpak/commit/68c12b9695eee4a94d896f0cf2f388f0d3c63df1 (branch flatpak-1.16.x)
-CVE-2026-XXXX [GHSA-w69g-9x8j-7p8f]
+CVE-2026-96282 [GHSA-w69g-9x8j-7p8f]
- flatpak 1.18.1-1 (bug #1144130)
- [trixie] - flatpak 1.16.6-1~deb13u2
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-w69g-9x8j-7p8f
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/6ec728c15b4eff47b7d69a2cc22e4aef52011585 (1.18.1)
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/ad044fc728cffe22dfa78e14c351bfe907f5164f (1.18.1)
@@ -56454,9 +56450,8 @@ CVE-2026-XXXX [GHSA-w69g-9x8j-7p8f]
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/e1f2ef83cd7225906078635e3d7561e9bc2cbd5b (branch flatpak-1.16.x)
NOTE: Additional requirement: https://github.com/flatpak/flatpak/commit/3d43a0f5fa602cc3edc557d8ab835030140792b1 (branch flatpak-1.16.x)
NOTE: Additional requirement: https://github.com/flatpak/flatpak/commit/68c12b9695eee4a94d896f0cf2f388f0d3c63df1 (branch flatpak-1.16.x)
-CVE-2026-XXXX [GHSA-q4gr-vc25-57m5]
+CVE-2026-96281 [GHSA-q4gr-vc25-57m5]
- flatpak 1.18.1-1 (bug #1144130)
- [trixie] - flatpak 1.16.6-1~deb13u2
NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-q4gr-vc25-57m5
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/d5939b0f1751df7dede31a1ee7fb5b8dfe49fd79 (1.18.1)
NOTE: Fixed by: https://github.com/flatpak/flatpak/commit/9b990351898b18b48bf4e834bcbc618d270cf8b1 (1.18.1)
=====================================
data/DSA/list
=====================================
@@ -227,7 +227,7 @@
{CVE-2026-93676}
[trixie] - xdg-dbus-proxy 0.1.6-1+deb13u2
[12 Aug 2026] DSA-6432-1 flatpak - security update
- {CVE-2026-90616 CVE-2026-92162}
+ {CVE-2026-90616 CVE-2026-92162 CVE-2026-96275 CVE-2026-96276 CVE-2026-96280 CVE-2026-96282 CVE-2026-96281}
[trixie] - flatpak 1.16.6-1~deb13u2
[11 Aug 2026] DSA-6431-1 openjdk-25 - security update
{CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147}
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6694ab46b6d0747b26210cfcaf63e62a56a6558
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6694ab46b6d0747b26210cfcaf63e62a56a6558
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260923/bfb468d2/attachment.htm>
More information about the debian-security-tracker-commits
mailing list