Skip to content
OpenAdvisories
High ELSA-2024-6417 1 CVE

Important: flatpak security update (Oracle Linux 7)

Published Oct 1, 2024 · Updated Oct 1, 2024

Ecosystem: Oracle Linux

Summary

[1.0.9-13.0.1]
- Fix CVE-2024-42472 [Orabug: 37027734]

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 flatpak 0:1.0.9-13.0.1.el7_9
Oracle Linux · 7 flatpak-builder 0:1.0.0-13.0.1.el7_9
Oracle Linux · 7 flatpak-devel 0:1.0.9-13.0.1.el7_9
Oracle Linux · 7 flatpak-libs 0:1.0.9-13.0.1.el7_9

Vulnerabilities 1

  • Critical 10.0
    CVE-2024-42472

    Flatpak may allow access to files outside sandbox for certain apps

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, whi…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine