Summary
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
Security Fix(es):
* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | flatpak | 1.12.9-1.el9_4 |
| AlmaLinux · 9 | flatpak-devel | 1.12.9-1.el9_4 |
| AlmaLinux · 9 | flatpak-libs | 1.12.9-1.el9_4 |
| AlmaLinux · 9 | flatpak-selinux | 1.12.9-1.el9_4 |
| AlmaLinux · 9 | flatpak-session-helper | 1.12.9-1.el9_4 |
Vulnerabilities 1
-
High 8.4CVE-2024-32462 Public exploit
Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the …