Skip to content
OpenAdvisories
High ELSA-2021-1002 1 CVE

Important: flatpak security update (Oracle Linux 7)

Published Mar 29, 2021 · Updated Mar 29, 2021

Ecosystem: Oracle Linux

Summary

[1.0.9-11]
- Fix CVE-2021-21381 (#1938059)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 flatpak 0:1.0.9-11.el7_9
Oracle Linux · 7 flatpak-builder 0:1.0.0-11.el7_9
Oracle Linux · 7 flatpak-devel 0:1.0.9-11.el7_9
Oracle Linux · 7 flatpak-libs 0:1.0.9-11.el7_9

Vulnerabilities 1

  • High 7.1
    CVE-2021-21381

    Sandbox escape via special tokens in .desktop file

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used by an attacker to gain access…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu