Skip to content
OpenAdvisories
High ELSA-2021-1068 1 CVE

Important: flatpak security update (Oracle Linux 8)

Published Apr 7, 2021 · Updated Apr 7, 2021

Ecosystem: Oracle Linux

Summary

[1.6.2-6]
- Fix CVE-2021-21381 (#1938062)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 flatpak 0:1.6.2-6.el8_3
Oracle Linux · 8 flatpak-libs 0:1.6.2-6.el8_3
Oracle Linux · 8 flatpak-selinux 0:1.6.2-6.el8_3
Oracle Linux · 8 flatpak-session-helper 0:1.6.2-6.el8_3

Vulnerabilities 1

  • High 7.1
    CVE-2021-21381

    Sandbox escape via special tokens in .desktop file

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used by an attacker to gain access…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu