Red Hat Security AdvisoryRHSA-2026:90896
flatpak-builder security update
Released 2026-10-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) flatpak-builder-1.0.9-4.el8_6
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) flatpak-builder-1.0.9-4.el8_6
Fixes 1 record
Priority HIGH 69
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00299 · Published 2026-09-17 · Fixed in 1.4.4-1.el10_2.1, 1.4.4-1.el10_0.1 +8 CWE-94
