Amazon Linux 2023 : flatpak, flatpak-devel, flatpak-libs (ALAS2023-2024-745)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-745 advisory. A sandbox escape vulnerability was found in Flatpak due to a symlink-following issue when mounting persistent directories. This flaw allows a local user or attacker to craft a symbolic link that can...

Amazon Linux 2023 : bubblewrap (ALAS2023-2024-726)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-726 advisory. A sandbox escape vulnerability was found in Flatpak due to a symlink-following issue when mounting persistent directories. This flaw allows a local user or attacker to craft a symbolic link that can...

CVE-2024-42472

A sandbox escape vulnerability was found in Flatpak due to a symlink-following issue when mounting persistent directories. This flaw allows a local user or attacker to craft a symbolic link that can bypass the intended restrictions, enabling access to and modification of files outside the...