flatpak security update

1.0.9-11 - Fix CVE-2021-21381 1938059...

RHEL 7 : flatpak (RHSA-2021:1002)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1002 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: file forwarding feature...

Fedora 33 : flatpak (2021-26ad138ffa)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-26ad138ffa advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before...

Fedora: Security Advisory for flatpak (FEDORA-2021-26ad138ffa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for flatpak (FEDORA-2021-fe7decc595)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: flatpak-1.10.2-1.fc34

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information...

[SECURITY] Fedora 33 Update: flatpak-1.10.2-1.fc33

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information...

MGASA-2021-0143 Updated flatpak packages fix security vulnerabilities

Sandbox escape where a malicious application can execute code outside the sandbox by controlling the environment of the "flatpak run" command when spawning a sub-sandbox CVE-2021-21261. A potential attack where a flatpak application could use custom formatted .desktop files to gain access to file...

Updated flatpak packages fix a security vulnerability

A potential attack where a flatpak application could use custom formatted .desktop files to gain access to files on the host system CVE-2021-21381...

Updated flatpak packages fix security vulnerabilities

Sandbox escape where a malicious application can execute code outside the sandbox by controlling the environment of the "flatpak run" command when spawning a sub-sandbox CVE-2021-21261. A potential attack where a flatpak application could use custom formatted .desktop files to gain access to file...

MGASA-2021-0145 Updated flatpak packages fix a security vulnerability

A potential attack where a flatpak application could use custom formatted .desktop files to gain access to files on the host system CVE-2021-21381...

Debian DSA-4868-1 : flatpak - security update

Anton Lydike discovered that sandbox restrictions in Flatpak, an application deployment framework for desktop apps, could be bypassed via a malicious .desktop file. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian: Security Advisory (DSA-4868-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-202103-4] flatpak: sandbox escape

Arch Linux Security Advisory ASA-202103-4 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2021-21381 Package : flatpak Type : sandbox escape Remote : No Link : https://security.archlinux.org/AVG-1678 Summary ======= The package flatpak before version...

[SECURITY] [DSA 4868-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4868-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2021 https://www.debian.org/security/faq -...

CVE-2021-21381

A sandbox escape flaw was found in the way flatpak handled special tokens in ".desktop" files. This flaw allows an attacker to gain access to files that are not ordinarily allowed by the app's permissions. The highest threat from this vulnerability is to confidentiality and integrity. Mitigation...

DSA-4868-1 flatpak - security update

Bulletin has no description...

CVE-2021-21381

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used by an attacker to gain access to files that would not ordinarily be...

CVE-2021-21381

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used by an attacker to gain access to files that would not ordinarily be...

DEBIAN-CVE-2021-21381

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used by an attacker to gain access to files that would not ordinarily be...