UBUNTU-CVE-2026-96283
- Source
- https://ubuntu.com/security/CVE-2026-96283
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96283.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-96283
- Upstream
- CVE-2026-96283
- Published
- 2026-09-27T22:17:00Z
- Modified
- 2026-10-01T00:22:43Z
- Severity
-
- 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.
- References
Affected packages
Ubuntu:Pro:18.04:LTS / flatpak
Package
- Name
- flatpak
- Purl
- pkg:deb/ubuntu/flatpak?arch=source&distro=esm-apps%2Fbionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
0.*
0.8.7-5
0.10.0-1
0.10.0-2
0.10.1-1
0.10.2-1
0.10.2.1-1
0.10.2.1-2
0.10.3-1
0.11.1-0ubuntu1
0.11.3-2
0.11.3-3
0.11.7-0ubuntu0.1
1.*
1.0.1-0ubuntu0.1
1.0.6-0ubuntu0.1
1.0.7-0ubuntu0.18.04.1
1.0.8-0ubuntu0.18.04.1
1.0.9-0ubuntu0.1
1.0.9-0ubuntu0.2
1.0.9-0ubuntu0.3
1.0.9-0ubuntu0.4
1.0.9-0ubuntu0.4+esm1
Ecosystem specific
{
"binaries": [
{
"binary_name": "flatpak",
"binary_version": "1.0.9-0ubuntu0.4+esm1"
},
{
"binary_name": "flatpak-tests",
"binary_version": "1.0.9-0ubuntu0.4+esm1"
},
{
"binary_name": "gir1.2-flatpak-1.0",
"binary_version": "1.0.9-0ubuntu0.4+esm1"
},
{
"binary_name": "libflatpak0",
"binary_version": "1.0.9-0ubuntu0.4+esm1"
}
]
}
Ubuntu:Pro:20.04:LTS / flatpak
Package
- Name
- flatpak
- Purl
- pkg:deb/ubuntu/flatpak?arch=source&distro=esm-apps%2Ffocal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
1.*
1.4.3-1
1.6.0-1
1.6.1-1
1.6.2-1
1.6.3-1
1.6.5-0ubuntu0.1
1.6.5-0ubuntu0.2
1.6.5-0ubuntu0.3
1.6.5-0ubuntu0.4
1.6.5-0ubuntu0.5
1.6.5-0ubuntu0.5+esm1
Ecosystem specific
{
"binaries": [
{
"binary_name": "flatpak",
"binary_version": "1.6.5-0ubuntu0.5+esm1"
},
{
"binary_name": "flatpak-tests",
"binary_version": "1.6.5-0ubuntu0.5+esm1"
},
{
"binary_name": "gir1.2-flatpak-1.0",
"binary_version": "1.6.5-0ubuntu0.5+esm1"
},
{
"binary_name": "libflatpak0",
"binary_version": "1.6.5-0ubuntu0.5+esm1"
}
]
}
Ubuntu:Pro:22.04:LTS / flatpak
Package
- Name
- flatpak
- Purl
- pkg:deb/ubuntu/flatpak?arch=source&distro=esm-apps%2Fjammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
1.*
1.10.2-3
1.12.2-1
1.12.2-2
1.12.3-1
1.12.4-1
1.12.5-1
1.12.6-1
1.12.7-1
1.12.7-1ubuntu0.1
1.12.7-1ubuntu0.1+esm1
Ecosystem specific
{
"binaries": [
{
"binary_name": "flatpak",
"binary_version": "1.12.7-1ubuntu0.1+esm1"
},
{
"binary_name": "flatpak-tests",
"binary_version": "1.12.7-1ubuntu0.1+esm1"
},
{
"binary_name": "gir1.2-flatpak-1.0",
"binary_version": "1.12.7-1ubuntu0.1+esm1"
},
{
"binary_name": "libflatpak0",
"binary_version": "1.12.7-1ubuntu0.1+esm1"
}
]
}
Ubuntu:Pro:24.04:LTS / flatpak
Package
- Name
- flatpak
- Purl
- pkg:deb/ubuntu/flatpak?arch=source&distro=esm-apps%2Fnoble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
1.*
1.14.4-2
1.14.5-1
1.14.5-1build1
1.14.5-1build4
1.14.5-1build5
1.14.5-1build6
1.14.6-1
1.14.6-1ubuntu0.1
1.14.6-1ubuntu0.1+esm1
Ecosystem specific
{
"binaries": [
{
"binary_name": "flatpak",
"binary_version": "1.14.6-1ubuntu0.1+esm1"
},
{
"binary_name": "flatpak-tests",
"binary_version": "1.14.6-1ubuntu0.1+esm1"
},
{
"binary_name": "gir1.2-flatpak-1.0",
"binary_version": "1.14.6-1ubuntu0.1+esm1"
},
{
"binary_name": "libflatpak0",
"binary_version": "1.14.6-1ubuntu0.1+esm1"
}
]
}