(RHSA-2024:3961) Important: flatpak security update

2024-06-1715:45:15

access.redhat.com

flatpak

security update

sandbox escape

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

AI Score

7.4

Confidence

Low

JSON

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64flatpak-debugsource< 1.12.9-1.el8_10flatpak-debugsource-1.12.9-1.el8_10.x86_64.rpm
RedHat8i686flatpak-session-helper-debuginfo< 1.12.9-1.el8_10flatpak-session-helper-debuginfo-1.12.9-1.el8_10.i686.rpm
RedHat8aarch64flatpak-debuginfo< 1.12.9-1.el8_10flatpak-debuginfo-1.12.9-1.el8_10.aarch64.rpm
RedHat8ppc64leflatpak-tests-debuginfo< 1.12.9-1.el8_10flatpak-tests-debuginfo-1.12.9-1.el8_10.ppc64le.rpm
RedHat8x86_64flatpak-session-helper< 1.12.9-1.el8_10flatpak-session-helper-1.12.9-1.el8_10.x86_64.rpm
RedHat8x86_64flatpak-debuginfo< 1.12.9-1.el8_10flatpak-debuginfo-1.12.9-1.el8_10.x86_64.rpm
RedHat8ppc64leflatpak-libs< 1.12.9-1.el8_10flatpak-libs-1.12.9-1.el8_10.ppc64le.rpm
RedHat8x86_64flatpak-session-helper-debuginfo< 1.12.9-1.el8_10flatpak-session-helper-debuginfo-1.12.9-1.el8_10.x86_64.rpm
RedHat8s390xflatpak< 1.12.9-1.el8_10flatpak-1.12.9-1.el8_10.s390x.rpm
RedHat8aarch64flatpak-devel< 1.12.9-1.el8_10flatpak-devel-1.12.9-1.el8_10.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	x86_64	flatpak-debugsource	< 1.12.9-1.el8_10	flatpak-debugsource-1.12.9-1.el8_10.x86_64.rpm
RedHat	8	i686	flatpak-session-helper-debuginfo	< 1.12.9-1.el8_10	flatpak-session-helper-debuginfo-1.12.9-1.el8_10.i686.rpm
RedHat	8	aarch64	flatpak-debuginfo	< 1.12.9-1.el8_10	flatpak-debuginfo-1.12.9-1.el8_10.aarch64.rpm
RedHat	8	ppc64le	flatpak-tests-debuginfo	< 1.12.9-1.el8_10	flatpak-tests-debuginfo-1.12.9-1.el8_10.ppc64le.rpm
RedHat	8	x86_64	flatpak-session-helper	< 1.12.9-1.el8_10	flatpak-session-helper-1.12.9-1.el8_10.x86_64.rpm
RedHat	8	x86_64	flatpak-debuginfo	< 1.12.9-1.el8_10	flatpak-debuginfo-1.12.9-1.el8_10.x86_64.rpm
RedHat	8	ppc64le	flatpak-libs	< 1.12.9-1.el8_10	flatpak-libs-1.12.9-1.el8_10.ppc64le.rpm
RedHat	8	x86_64	flatpak-session-helper-debuginfo	< 1.12.9-1.el8_10	flatpak-session-helper-debuginfo-1.12.9-1.el8_10.x86_64.rpm
RedHat	8	s390x	flatpak	< 1.12.9-1.el8_10	flatpak-1.12.9-1.el8_10.s390x.rpm
RedHat	8	aarch64	flatpak-devel	< 1.12.9-1.el8_10	flatpak-devel-1.12.9-1.el8_10.aarch64.rpm