A notice published on September 28, 2026 says Flatpak 1.18.4 fixes several vulnerabilities and considers all earlier versions vulnerable.
A notice published on September 28, 2026 says Flatpak 1.18.4 fixes several security vulnerabilities. According to the text, all earlier versions should be considered vulnerable. The release also improves protection against symlink traversal, related to CVE-2026-97023 and CVE-2026-97024.
To check the scope and technical details, consult the release announcement and project security advisories referenced by the original post in the oss-sec feed. Check the installed version and follow official update guidance; the supplied text does not specify the other changes mentioned in the announcement.