Skip to content
OpenAdvisories
High DSA-4984-1 1 CVE

flatpak - security update

Published Oct 12, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 flatpak 1.10.5-0+deb11u1

Vulnerabilities 1

  • High 8.8

    Sandbox bypass via recent VFS-manipulating syscalls

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick…