Important: flatpak security update

2024-06-1700:00:00

errata.almalinux.org

flatpak

security update

sandbox escape

requestbackground portal

cve-2024-32462

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%

JSON

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9noarchflatpak-selinux< 1.12.9-1.el9_4flatpak-selinux-1.12.9-1.el9_4.noarch.rpm
almalinux9i686flatpak-libs< 1.12.9-1.el9_4flatpak-libs-1.12.9-1.el9_4.i686.rpm
almalinux9x86_64flatpak< 1.12.9-1.el9_4flatpak-1.12.9-1.el9_4.x86_64.rpm
almalinux9x86_64flatpak-libs< 1.12.9-1.el9_4flatpak-libs-1.12.9-1.el9_4.x86_64.rpm
almalinux9x86_64flatpak-session-helper< 1.12.9-1.el9_4flatpak-session-helper-1.12.9-1.el9_4.x86_64.rpm
almalinux9aarch64flatpak< 1.12.9-1.el9_4flatpak-1.12.9-1.el9_4.aarch64.rpm
almalinux9aarch64flatpak-session-helper< 1.12.9-1.el9_4flatpak-session-helper-1.12.9-1.el9_4.aarch64.rpm
almalinux9aarch64flatpak-libs< 1.12.9-1.el9_4flatpak-libs-1.12.9-1.el9_4.aarch64.rpm
almalinux9s390xflatpak-libs< 1.12.9-1.el9_4flatpak-libs-1.12.9-1.el9_4.s390x.rpm
almalinux9s390xflatpak< 1.12.9-1.el9_4flatpak-1.12.9-1.el9_4.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	noarch	flatpak-selinux	< 1.12.9-1.el9_4	flatpak-selinux-1.12.9-1.el9_4.noarch.rpm
almalinux	9	i686	flatpak-libs	< 1.12.9-1.el9_4	flatpak-libs-1.12.9-1.el9_4.i686.rpm
almalinux	9	x86_64	flatpak	< 1.12.9-1.el9_4	flatpak-1.12.9-1.el9_4.x86_64.rpm
almalinux	9	x86_64	flatpak-libs	< 1.12.9-1.el9_4	flatpak-libs-1.12.9-1.el9_4.x86_64.rpm
almalinux	9	x86_64	flatpak-session-helper	< 1.12.9-1.el9_4	flatpak-session-helper-1.12.9-1.el9_4.x86_64.rpm
almalinux	9	aarch64	flatpak	< 1.12.9-1.el9_4	flatpak-1.12.9-1.el9_4.aarch64.rpm
almalinux	9	aarch64	flatpak-session-helper	< 1.12.9-1.el9_4	flatpak-session-helper-1.12.9-1.el9_4.aarch64.rpm
almalinux	9	aarch64	flatpak-libs	< 1.12.9-1.el9_4	flatpak-libs-1.12.9-1.el9_4.aarch64.rpm
almalinux	9	s390x	flatpak-libs	< 1.12.9-1.el9_4	flatpak-libs-1.12.9-1.el9_4.s390x.rpm
almalinux	9	s390x	flatpak	< 1.12.9-1.el9_4	flatpak-1.12.9-1.el9_4.s390x.rpm