Skip to content
OpenAdvisories
High ELSA-2021-4042 1 CVE

Important: flatpak security update (Oracle Linux 8)

Published Nov 1, 2021 · Updated Nov 1, 2021

Ecosystem: Oracle Linux

Summary

[1.8.5-4]
- Fix CVE-2021-41133 (#2012867)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 flatpak 0:1.8.5-4.el8_4
Oracle Linux · 8 flatpak-libs 0:1.8.5-4.el8_4
Oracle Linux · 8 flatpak-selinux 0:1.8.5-4.el8_4
Oracle Linux · 8 flatpak-session-helper 0:1.8.5-4.el8_4

Vulnerabilities 1

  • High 8.8
    CVE-2021-41133

    Sandbox bypass via recent VFS-manipulating syscalls

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine