MGASA-2026-0519
- Source
- https://advisories.mageia.org/MGASA-2026-0519.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0519.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0519
- Upstream
- CVE-2026-86320
- Published
- 2026-10-19T16:59:00Z
- Modified
- 2026-10-19T17:00:03Z
- Summary
- Updated flatpak-builder package fixes a security vulnerability
- Details
-
Host code execution via
git amhook execution in patch source extraction (use-git-am). (CVE-2026-86320) - References
-
- https://advisories.mageia.org/MGASA-2026-0519.html
- https://bugs.mageia.org/show_bug.cgi?id=36407
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/BJF2ORPRVKVTXPAFIDS6U5SNJHW6VTMX/
- https://github.com/flatpak/flatpak-builder/security/advisories/GHSA-j5p8-jgjc-f3xv
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJHPETQUQKC4Z7Z3LWM37VPXNFDJHFGB/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / flatpak-builder
Package
- Name
- flatpak-builder
- Purl
- pkg:rpm/mageia/flatpak-builder?arch=source&distro=mageia-10