Lucene search
K

51 matches found

OpenVAS
OpenVAS
added 2022/02/03 12:0 a.m.21 views

Fedora: Security Advisory for flatpak-builder (FEDORA-2022-8c64cb0992)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.6CVSS7.5AI score0.01666EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.18 views

Fedora: Security Advisory for flatpak-builder (FEDORA-2022-7e328bd66c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.7CVSS7.5AI score0.01666EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.16 views

Mageia: Security Advisory (MGASA-2018-0143)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.0042EPSS
Exploits0References4
Fedora
Fedora
added 2022/01/26 6:41 p.m.30 views

[SECURITY] Fedora 35 Update: flatpak-builder-1.2.2-1.fc35

Flatpak-builder is a tool for building flatpaks from sources. See http://flatpak.org/ for more information...

7.7CVSS0.1AI score0.01666EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2022/01/17 7:49 p.m.28 views

CVE-2022-21682

A path traversal vulnerability was found in Flatpak. This happens when flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the manifest, so running flatpak build against it will gain those permissions...

7.7CVSS2.1AI score0.01666EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/01/13 9:15 p.m.5 views

CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

7.7CVSS6.8AI score0.01666EPSS
Exploits0References10Affected Software1
UbuntuCve
UbuntuCve
added 2022/01/13 9:15 p.m.21 views

CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

7.7CVSS6.8AI score0.01666EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2022/01/13 12:0 a.m.34 views

CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

7.7CVSS7.1AI score0.01666EPSS
Exploits0
OSV
OSV
added 2022/01/13 12:0 a.m.21 views

CVE-2022-21682 flatpak-builder can access files outside the build directory.

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

7.7CVSS7.1AI score0.01666EPSS
Exploits0References9
Rockylinux
Rockylinux
added 2020/11/03 12:23 p.m.11 views

flatpak-builder bug fix and enhancement update

An update is available for flatpak-builder. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.1AI score
Exploits0
Mageia
Mageia
added 2018/02/26 4:23 p.m.33 views

Updated flatpak packages fix security vulnerability

Updated flatpak packages fix security vulnerability: A sandbox escape in the flatpak dbus proxy in the authentication phase CVE-2018-6560. The flatpak has been upgraded to the latest stable version, 0.10.3, which fixes this issue. The bubblewrap, ostree, flatpak-builder, xdg-desktop-portal,...

8.8CVSS2.3AI score0.0042EPSS
Exploits0References2
Rows per page
Query Builder