ALSA-2026:80495

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:80495.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:80495
Related
Published
2026-10-12T00:00:00Z
Modified
2026-10-14T12:45:02Z
Summary
Important: flatpak-builder security update
Details

Flatpak-builder is a tool for building flatpaks from sources.

Security Fix(es):

  • flatpak-builder: Host code execution via git am hook execution in patch source extraction (use-git-am) (CVE-2026-86320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10 / flatpak-builder

Package

Name
flatpak-builder
Purl
pkg:rpm/almalinux/flatpak-builder

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.4-1.el10_2.1

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:80495.json"