(RHSA-2024:3980) Important: flatpak security update

2024-06-1810:02:21

access.redhat.com

flatpak

security update

sandbox escape

cve-2024-32462

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

AI Score

7.4

Confidence

Low

JSON

Flatpak is a system for building, distributing, and running sandboxed desktop
applications on Linux.

Security Fix(es):

flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer the CVE page(s)
listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7ppc64flatpak< 1.0.9-13.el7_9flatpak-1.0.9-13.el7_9.ppc64.rpm
RedHat7s390xflatpak-builder< 1.0.0-13.el7_9flatpak-builder-1.0.0-13.el7_9.s390x.rpm
RedHat7s390xflatpak< 1.0.9-13.el7_9flatpak-1.0.9-13.el7_9.s390x.rpm
RedHat7ppc64leflatpak-debuginfo< 1.0.9-13.el7_9flatpak-debuginfo-1.0.9-13.el7_9.ppc64le.rpm
RedHat7s390xflatpak-debuginfo< 1.0.9-13.el7_9flatpak-debuginfo-1.0.9-13.el7_9.s390x.rpm
RedHat7x86_64flatpak-libs< 1.0.9-13.el7_9flatpak-libs-1.0.9-13.el7_9.x86_64.rpm
RedHat7ppc64flatpak-devel< 1.0.9-13.el7_9flatpak-devel-1.0.9-13.el7_9.ppc64.rpm
RedHat7s390xflatpak-devel< 1.0.9-13.el7_9flatpak-devel-1.0.9-13.el7_9.s390x.rpm
RedHat7ppc64flatpak-builder< 1.0.0-13.el7_9flatpak-builder-1.0.0-13.el7_9.ppc64.rpm
RedHat7ppc64leflatpak-devel< 1.0.9-13.el7_9flatpak-devel-1.0.9-13.el7_9.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	ppc64	flatpak	< 1.0.9-13.el7_9	flatpak-1.0.9-13.el7_9.ppc64.rpm
RedHat	7	s390x	flatpak-builder	< 1.0.0-13.el7_9	flatpak-builder-1.0.0-13.el7_9.s390x.rpm
RedHat	7	s390x	flatpak	< 1.0.9-13.el7_9	flatpak-1.0.9-13.el7_9.s390x.rpm
RedHat	7	ppc64le	flatpak-debuginfo	< 1.0.9-13.el7_9	flatpak-debuginfo-1.0.9-13.el7_9.ppc64le.rpm
RedHat	7	s390x	flatpak-debuginfo	< 1.0.9-13.el7_9	flatpak-debuginfo-1.0.9-13.el7_9.s390x.rpm
RedHat	7	x86_64	flatpak-libs	< 1.0.9-13.el7_9	flatpak-libs-1.0.9-13.el7_9.x86_64.rpm
RedHat	7	ppc64	flatpak-devel	< 1.0.9-13.el7_9	flatpak-devel-1.0.9-13.el7_9.ppc64.rpm
RedHat	7	s390x	flatpak-devel	< 1.0.9-13.el7_9	flatpak-devel-1.0.9-13.el7_9.s390x.rpm
RedHat	7	ppc64	flatpak-builder	< 1.0.0-13.el7_9	flatpak-builder-1.0.0-13.el7_9.ppc64.rpm
RedHat	7	ppc64le	flatpak-devel	< 1.0.9-13.el7_9	flatpak-devel-1.0.9-13.el7_9.ppc64le.rpm