Red Hat Security Advisory

RHSA-2026:35843

flatpak security update

Released 2026-07-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) flatpak-1.12.9-3.el7_9, flatpak-libs-1.12.9-3.el7_9
Red Hat Enterprise Linux Server Optional (v. 7 ELS) flatpak-builder-1.0.0-16.el7_9, flatpak-devel-1.12.9-3.el7_9

TI-2026-26401 CVE-2026-34078

MEDIUM 51

Flatpak is a Linux application sandboxing and distribution framework.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01709 Published 2026-04-07 Fixed in 1.16.4 CWE-61

TI-2026-26402 CVE-2026-34079

MEDIUM 44

Flatpak is a Linux application sandboxing and distribution framework.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00328 Published 2026-04-07 Fixed in 1.16.4 CWE-22