Red Hat Security AdvisoryRHSA-2026:86714
flatpak-builder security update
Released 2026-10-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) flatpak-builder-1.0.14-3.el8_8
- Red Hat Enterprise Linux AppStream TUS (v.8.8) flatpak-builder-1.0.14-3.el8_8
Fixes 1 record
Priority HIGH 69
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00299 · Published 2026-09-17 · Fixed in 1.4.4-1.el10_2.1, 1.4.4-1.el10_0.1 +8 CWE-94