Summary
[1.12.9-1]
- Update to 1.12.9 (CVE-2024-32462)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | flatpak | 0:1.12.9-1.el9_4 |
| Oracle Linux · 9 | flatpak-devel | 0:1.12.9-1.el9_4 |
| Oracle Linux · 9 | flatpak-libs | 0:1.12.9-1.el9_4 |
| Oracle Linux · 9 | flatpak-selinux | 0:1.12.9-1.el9_4 |
| Oracle Linux · 9 | flatpak-session-helper | 0:1.12.9-1.el9_4 |
Vulnerabilities 1
-
High 8.4CVE-2024-32462 Public exploit
Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the …