Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-8308: Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file. 1675070: CVE-2019-8308 flatpak: potential /proc based sandbox escape
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | flatpak | 0:1.0.2-4.amzn2.0.1 |
| Amazon Linux · 2 | flatpak-builder | 0:1.0.0-4.amzn2.0.1 |
| Amazon Linux · 2 | flatpak-debuginfo | 0:1.0.2-4.amzn2.0.1 |
| Amazon Linux · 2 | flatpak-devel | 0:1.0.2-4.amzn2.0.1 |
| Amazon Linux · 2 | flatpak-libs | 0:1.0.2-4.amzn2.0.1 |
Vulnerabilities 1
-
Unscored —
Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows a…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-8308.html