CentOS 8 : flatpak (CESA-2021:0304)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0304 advisory. - flatpak: sandbox escape via spawn portal CVE-2021-21261 Note that Nessus has not tested for this issue but has instead relied only on the application's...

flatpak: sandbox escape via spawn portal

A flaw was found in Flatpak. The Flatpak portal D-Bus service passes caller-specified environment variables to non-sandboxed processes on the host system, and in particular to the flatpak run command that is used to launch the new sandbox instance. A malicious or compromised Flatpak app could set...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

flatpak: sandbox escape via spawn portal

A flaw was found in Flatpak. The Flatpak portal D-Bus service passes caller-specified environment variables to non-sandboxed processes on the host system, and in particular to the flatpak run command that is used to launch the new sandbox instance. A malicious or compromised Flatpak app could set...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

flatpak: sandbox escape via spawn portal

A flaw was found in Flatpak. The Flatpak portal D-Bus service passes caller-specified environment variables to non-sandboxed processes on the host system, and in particular to the flatpak run command that is used to launch the new sandbox instance. A malicious or compromised Flatpak app could set...

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: sandbox escape via spawn portal CVE-2021-21261 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

RHEL 8 : flatpak (RHSA-2021:0306)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0306 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: sandbox escape via spaw...

flatpak security update

1.6.2-5 - Fix CVE-2021-21261 1918774...

RHEL 8 : flatpak (RHSA-2021:0304)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0304 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: sandbox escape via spaw...

Oracle Linux 8 : flatpak (ELSA-2021-0304)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0304 advisory. 1.6.2-5 - Fix CVE-2021-21261 1918774 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

RHEL 8 : flatpak (RHSA-2021:0307)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0307 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: sandbox escape via spaw...

CentOS 8 : flatpak (CESA-2019:1143)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:1143 advisory. - flatpak: Sandbox bypass via IOCSTI incomplete fix for CVE-2017-5226 CVE-2019-10063 Note that Nessus has not tested for this issue but has instead relied only ...

GLSA-202101-21 : Flatpak: Sandbox escape

The remote host is affected by the vulnerability described in GLSA-202101-21 Flatpak: Sandbox escape A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. Impact : A remote attacker could entice a us...

Flatpak: Sandbox escape

Background Flatpak is a Linux application sandboxing and distribution framework. Description A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. Impact A remote attacker could entice a user to open...

[SECURITY] [DSA 4830-2] flatpak regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4830-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4830-2] flatpak regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4830-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 22, 2021 https://www.debian.org/security/faq -...

DSA-4830-2 flatpak - regression update

Bulletin has no description...

[ASA-202101-40] flatpak: sandbox escape

Arch Linux Security Advisory ASA-202101-40 ========================================== Severity: High Date : 2021-01-20 CVE-ID : CVE-2021-21261 Package : flatpak Type : sandbox escape Remote : No Link : https://security.archlinux.org/AVG-1454 Summary ======= The package flatpak before version...