Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | flatpak | 1.10.5-0+deb11u1 |
Vulnerabilities 1
-
High 8.8
Sandbox bypass via recent VFS-manipulating syscalls
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick…