1870 matches found
EUVD-2026-71774
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
SUSE CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
UBUNTU-CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
CVE-2026-76925 Flatpak: flatpak: toctou race condition allows symlink redirection
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
CVE-2026-76925 Flatpak: flatpak: toctou race condition allows symlink redirection
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
CVE-2026-76925
CVE-2026-76925 is a TOCTOU race condition in Flatpak's org.freedesktop.Flatpak.SystemHelper component. The root cause is that a privileged chmod operation executes before OSTree repository validation within the Deploy() function, creating a timing window an attacker can exploit to redirect symlin...
CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
CVE-2026-76925: Time-of-check Time-of-use (TOCTOU) Race Condition
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
CVE-2026-76925: Time-of-check Time-of-use (TOCTOU) Race Condition
A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...
PT-2026-86261
Name of the Vulnerable Software and Affected Versions Flatpak affected versions not specified Description A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This occurs because a privileged chmod operation executes before the OSTree...
Linux Distros Unpatched Vulnerability : CVE-2026-76925
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...
pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading
A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...
MGASA-2026-0342 Updated flatpak package fixes security vulnerabilities
Updated flatpak package fixes security vulnerabilities. Please see the links for additional information...
Updated flatpak package fixes security vulnerabilities
Updated flatpak package fixes security vulnerabilities. Please see the links for additional information...
dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup
A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup notably SOPEERPIDFD are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and den...
PT-2026-89552
Updated flatpak package fixes security vulnerabilities. Please see the links for additional information...
flatpak v1.18.2
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. See https://flatpak.org/ for more information. Flatpak is available in the package repositories of most Linux distributions and can be installed from there. See https://flatpak.org/setup/ for quic...
[SECURITY] [DSA 6472-1] bubblewrap security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6472-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 27, 2026 https://www.debian.org/security/faq -...