Flatpak, OpenStack, and OpenSSH security fixes

Security traffic on 2026-08-12 centered on sandbox escapes in Flatpak, cross-tenant and SSRF issues in OpenStack services, and a new OpenSSH release that closes three CVEs. Further advisories covered glibc wordexp flaws, a D-Bus proxy filter bypass, critical RCE in svxlink, and a libexpat denial of service.

Flatpak 1.18.1 closes sandbox escapes and local root escalations

Flatpak 1.18.1 fixes multiple high-impact vulnerabilities that permitted sandbox escapes and local root privilege escalation through symlink and path handling weaknesses. The issues affect the widely used application sandboxing framework. Operators should upgrade promptly to restore intended isolation boundaries.

OpenStack Designate cross-tenant DNS overlap and mDNS DoS

OpenStack Security Advisory OSSA-2026-034 discloses CVE-2026-71193 and CVE-2026-71194 in Designate. The flaws allow cross-tenant DNS zone overlap and mDNS denial of service in multi-pool deployments via pool scheduling. Cloud operators running Designate with multiple pools need the patches to prevent tenant isolation failures and availability attacks.

OpenSSH 10.5 released with three CVE fixes

OpenSSH 10.5 is available and addresses three CVEs. The release notes observe a rise in AI-reported bugs and state that the project will issue fixes more frequently. Administrators should plan an update cycle for SSH servers and clients.

OpenStack Glance legacy Tasks import bypasses URI filtering

OpenStack Security Note OSSN-0105 reports that the Glance legacy Tasks API can bypass image import URI filtering, enabling server-side request forgery. Patches are available for the affected releases. Deployments still exposing the legacy import path should apply the fixes or disable the interface.

Glibc wordexp advisories: stack clash and invalid free

The GNU C Library published security advisories covering two wordexp CVEs. One involves a stack clash via tilde expansion and the other an invalid free when WRDE_APPEND is used. Applications and distributions that rely on wordexp should incorporate the corrected glibc packages.

xdg-dbus-proxy broadcast message filtering bypass

xdg-dbus-proxy, a Flatpak sandbox component, contained a broadcast message filtering bypass tracked as GHSA-r7hp-698j-2h6c. The issue is fixed in version 0.1.8. Flatpak-based environments should ensure the updated proxy is in place to keep D-Bus filtering effective.

Critical RCE and other flaws fixed in svxlink 26.05.1

svxlink 26.05.1 patches a critical remote code execution vulnerability rated CVSS 9.8 along with thirteen other issues. The software had carried the exposure for about thirteen years, with CVEs assigned through the Fedora CNA. Operators of this amateur radio voice linking stack should upgrade immediately.

Libexpat 2.8.3 fixes out-of-bounds read DoS

Libexpat 2.8.3 addresses CVE-2026-72522, an out-of-bounds read denial of service that affects 16-bit builds. Such builds are used in environments including Firefox on Windows. Updating the XML parser removes the crash path for untrusted input.