https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T00:45:13.621903+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-96283 CVE-2026-96283 — Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull 2026-10-01T00:45:14.499960+00:00

Affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.