Bug 2456284 (CVE-2026-34079)
| Summary: | CVE-2026-34079 flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Flatpak, a Linux application sandboxing and distribution framework. The caching mechanism for ld.so (dynamic linker/loader) improperly removes outdated cache files without adequately verifying that the application-controlled path to the outdated cache is within the designated cache directory. This vulnerability allows Flatpak applications to delete arbitrary files on the host system, potentially leading to system instability or data loss.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2456394, 2456395 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-04-07 22:02:01 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:21756 https://access.redhat.com/errata/RHSA-2026:21756 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:21757 https://access.redhat.com/errata/RHSA-2026:21757 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:21755 https://access.redhat.com/errata/RHSA-2026:21755 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:23420 https://access.redhat.com/errata/RHSA-2026:23420 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:23419 https://access.redhat.com/errata/RHSA-2026:23419 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:23418 https://access.redhat.com/errata/RHSA-2026:23418 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:23417 https://access.redhat.com/errata/RHSA-2026:23417 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:25068 https://access.redhat.com/errata/RHSA-2026:25068 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Via RHSA-2026:25381 https://access.redhat.com/errata/RHSA-2026:25381 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Via RHSA-2026:30901 https://access.redhat.com/errata/RHSA-2026:30901 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Extended Lifecycle Support Via RHSA-2026:35843 https://access.redhat.com/errata/RHSA-2026:35843 |