Skip to content
OpenAdvisories
High ELSA-2021-4044 1 CVE

Important: flatpak security update (Oracle Linux 7)

Published Nov 1, 2021 · Updated Nov 1, 2021

Ecosystem: Oracle Linux

Summary

[1.0.9-12]
- Fix CVE-2021-41133 (#2012864)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 flatpak 0:1.0.9-12.el7_9
Oracle Linux · 7 flatpak-builder 0:1.0.0-12.el7_9
Oracle Linux · 7 flatpak-devel 0:1.0.9-12.el7_9
Oracle Linux · 7 flatpak-libs 0:1.0.9-12.el7_9

Vulnerabilities 1

  • High 8.8
    CVE-2021-41133

    Sandbox bypass via recent VFS-manipulating syscalls

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine