{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Low" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"flatpak security update", "category":"general", "title":"Synopsis" }, { "text":"An update for flatpak is now available for openEuler-24.03-LTS-SP3", "category":"general", "title":"Summary" }, { "text":"flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information.\n\nSecurity Fix(es):\n\nA malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be mounted at unintended locations inside the sandbox.(CVE-2026-96282)\n\nBy calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.(CVE-2026-96283)", "category":"general", "title":"Description" }, { "text":"An update for flatpak is now available for openEuler-20.03-LTS-SP4/openEuler-24.03-LTS-SP3.\n\nopenEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Low", "category":"general", "title":"Severity" }, { "text":"flatpak", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-4309", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4309" }, { "summary":"CVE-2026-96282", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-96282&packageName=flatpak" }, { "summary":"CVE-2026-96283", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-96283&packageName=flatpak" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96282" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96283" }, { "summary":"openEuler-SA-2026-4309 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-4309.json" } ], "title":"An update for flatpak is now available for openEuler-24.03-LTS-SP3", "tracking":{ "initial_release_date":"2026-10-22T09:27:31+08:00", "revision_history":[ { "date":"2026-10-22T09:27:31+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-10-22T09:27:31+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-10-22T09:27:31+08:00", "id":"openEuler-SA-2026-4309", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-1.10.2-15.oe2403sp3.aarch64.rpm", "name":"flatpak-1.10.2-15.oe2403sp3.aarch64.rpm" }, "name":"flatpak-1.10.2-15.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64.rpm", "name":"flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64.rpm" }, "name":"flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64.rpm", "name":"flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64.rpm" }, "name":"flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-devel-1.10.2-15.oe2403sp3.aarch64.rpm", "name":"flatpak-devel-1.10.2-15.oe2403sp3.aarch64.rpm" }, "name":"flatpak-devel-1.10.2-15.oe2403sp3.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-1.10.2-15.oe2403sp3.src.rpm", "name":"flatpak-1.10.2-15.oe2403sp3.src.rpm" }, "name":"flatpak-1.10.2-15.oe2403sp3.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-1.10.2-15.oe2403sp3.x86_64.rpm", "name":"flatpak-1.10.2-15.oe2403sp3.x86_64.rpm" }, "name":"flatpak-1.10.2-15.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64.rpm", "name":"flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64.rpm" }, "name":"flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64.rpm", "name":"flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64.rpm" }, "name":"flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-devel-1.10.2-15.oe2403sp3.x86_64.rpm", "name":"flatpak-devel-1.10.2-15.oe2403sp3.x86_64.rpm" }, "name":"flatpak-devel-1.10.2-15.oe2403sp3.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"flatpak-help-1.10.2-15.oe2403sp3.noarch.rpm", "name":"flatpak-help-1.10.2-15.oe2403sp3.noarch.rpm" }, "name":"flatpak-help-1.10.2-15.oe2403sp3.noarch.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-1.10.2-15.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.aarch64", "name":"flatpak-1.10.2-15.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64", "name":"flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64", "name":"flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-devel-1.10.2-15.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.aarch64", "name":"flatpak-devel-1.10.2-15.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-1.10.2-15.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.src", "name":"flatpak-1.10.2-15.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-1.10.2-15.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.x86_64", "name":"flatpak-1.10.2-15.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64", "name":"flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64", "name":"flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-devel-1.10.2-15.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.x86_64", "name":"flatpak-devel-1.10.2-15.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"flatpak-help-1.10.2-15.oe2403sp3.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:flatpak-help-1.10.2-15.oe2403sp3.noarch", "name":"flatpak-help-1.10.2-15.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-96282", "notes":[ { "text":"A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be mounted at unintended locations inside the sandbox.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.src", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-help-1.10.2-15.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.src", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-help-1.10.2-15.oe2403sp3.noarch" ], "details":"flatpak security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4309" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.1, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.src", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-help-1.10.2-15.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2026-96282" }, { "cve":"CVE-2026-96283", "notes":[ { "text":"By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.src", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-help-1.10.2-15.oe2403sp3.noarch" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.src", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-help-1.10.2-15.oe2403sp3.noarch" ], "details":"flatpak security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4309" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.3, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.src", "openEuler-24.03-LTS-SP3:flatpak-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debuginfo-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-debugsource-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-devel-1.10.2-15.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:flatpak-help-1.10.2-15.oe2403sp3.noarch" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2026-96283" } ] }