Debian DSA-4984-1 : flatpak - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4984 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct...

[SECURITY] [DSA 4984-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4984-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 12, 2021 https://www.debian.org/security/faq -...

CVE-2021-41133

creationtimestamp| type| source ---|---|--- 2021-10-08 18:40:13+00:00| seen| https://t.me/cibsecurity/30247...

UBUNTU-CVE-2021-41133

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

CVE-2021-41133

CVE-2021-41133 affects Flatpak prior to versions 1.10.4 and 1.12.0. The issue allows Flatpak apps with direct AF_UNIX socket access (e.g., Wayland, Pipewire) to abuse VFS-related syscalls not blocked by the denylists in seccomp, manipulating /.flatpak-info or removing it to trick host portals and...