[ol8_codeready_builder] flatpak-devel-1.12.9-7.el8_10.aarch64

This package contains the pkg-config file and development headers for flatpak.

Changelog (Show File list) (Show related packages)

• Thu Oct 08 2026 Luigi Pavan <lpavan@redhat.com> - 1.12.9-7

  - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280)
    Resolves: RHEL-271507

• Mon Oct 05 2026 Luigi Pavan <lpavan@redhat.com> - 1.12.9-6

  - Avoid symlink path traversal in revokefs writer (CVE-2026-96808)
    Resolves: RHEL-267897
  - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275)
    Resolves: RHEL-267425

• Mon Sep 14 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.12.9-5

  - Harden data dir and var setup against symlink attacks
    Resolves: RHEL-258965

• Wed May 20 2026 Jan Grulich <jgrulich@redhat.com> - 1.12.9-4

  - Fix arbitrary code execution via crafted symlinks in sandbox-expose options
    Resolves: RHEL-165633
  - Fix arbitrary file deletion on host via improper cache file path validation
    Resolves: RHEL-170160

• Wed Sep 04 2024 Kalev Lember <klember@redhat.com> - 1.12.9-3

  - Fix previous changelog entry

• Mon Sep 02 2024 Kalev Lember <klember@redhat.com> - 1.12.9-2

  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472

• Tue Apr 30 2024 Kalev Lember <klember@redhat.com> - 1.12.9-1

  - Update to 1.12.9 (CVE-2024-32462)

• Mon Nov 06 2023 Debarshi Ray <rishi@fedoraproject.org> - 1.12.8-1

  - Rebase to 1.12.8 (RHEL-4220)

• Mon Nov 06 2023 Debarshi Ray <rishi@fedoraproject.org> - 1.10.8-3

  - Let flatpak own %{_sysconfdir}/flatpak (RHEL-15822)

• Mon Sep 04 2023 Miro Hrončok <mhroncok@redhat.com> - 1.10.8-2

  - Make sure to use the RHEL-lifetime supported Python and no other (RHEL-2225)