Skip to content
OpenAdvisories
Medium ELSA-2022-1792 1 CVE

Moderate: flatpak security and bug fix update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Ecosystem: Oracle Linux

Summary

[1.8.7-1]
- Rebase to 1.8.7 (#2041972)

[1.8.6-1]
- Rebase to 1.8.6 (#2010533)

[1.8.5-6]
- Fix CVE-2021-41133 (#2012869)

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 flatpak 0:1.8.7-1.el8
Oracle Linux · 8 flatpak-devel 0:1.8.7-1.el8
Oracle Linux · 8 flatpak-libs 0:1.8.7-1.el8
Oracle Linux · 8 flatpak-selinux 0:1.8.7-1.el8
Oracle Linux · 8 flatpak-session-helper 0:1.8.7-1.el8

Vulnerabilities 1

  • High 8.2
    CVE-2021-43860

    Permissions granted to applications can be hidden from the user at install time

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual permissions granted to the app …

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine