[ol8_codeready_builder] flatpak-devel-1.12.9-9.el8_10.i686

This package contains the pkg-config file and development headers for flatpak.

Changelog (Show File list) (Show related packages)

• Mon Oct 12 2026 Luigi Pavan <lpavan@redhat.com> - 1.12.9-9

  - Use fd-relative operations for files/etc during runtime deploy (CVE-2026-97024)
    Resolves: RHEL-272181

• Fri Oct 09 2026 Luigi Pavan <lpavan@redhat.com> - 1.12.9-8

  - Avoid path traversal deletion via deploy export/bin (CVE-2026-97023)
    Resolves: RHEL-272023

• Thu Oct 08 2026 Luigi Pavan <lpavan@redhat.com> - 1.12.9-7

  - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280)
    Resolves: RHEL-271507

• Mon Oct 05 2026 Luigi Pavan <lpavan@redhat.com> - 1.12.9-6

  - Avoid symlink path traversal in revokefs writer (CVE-2026-96808)
    Resolves: RHEL-267897
  - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275)
    Resolves: RHEL-267425

• Mon Sep 14 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.12.9-5

  - Harden data dir and var setup against symlink attacks
    Resolves: RHEL-258965

• Wed May 20 2026 Jan Grulich <jgrulich@redhat.com> - 1.12.9-4

  - Fix arbitrary code execution via crafted symlinks in sandbox-expose options
    Resolves: RHEL-165633
  - Fix arbitrary file deletion on host via improper cache file path validation
    Resolves: RHEL-170160

• Wed Sep 04 2024 Kalev Lember <klember@redhat.com> - 1.12.9-3

  - Fix previous changelog entry

• Mon Sep 02 2024 Kalev Lember <klember@redhat.com> - 1.12.9-2

  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472

• Tue Apr 30 2024 Kalev Lember <klember@redhat.com> - 1.12.9-1

  - Update to 1.12.9 (CVE-2024-32462)

• Mon Nov 06 2023 Debarshi Ray <rishi@fedoraproject.org> - 1.12.8-1

  - Rebase to 1.12.8 (RHEL-4220)