[SECURITY] [DSA 6524-1] flatpak security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6524-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
September 28, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : flatpak
CVE ID : CVE-2026-90616 CVE-2026-92162 CVE-2026-97023 CVE-2026-97024
CVE-2026-97025 CVE-2026-97026 CVE-2026-97027 CVE-2026-97029
Multiple security vulnerabilities were discovered in Flatpak, an
application deployment framework for desktop apps, which could result in
denial service via malicious applications or information disclosure.
For the stable distribution (trixie), these problems have been fixed in
version 1.16.6-1~deb13u3.
We recommend that you upgrade your flatpak packages.
For the detailed security status of flatpak please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/flatpak
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=dsjM
-----END PGP SIGNATURE-----
Reply to: