Skip to content
OpenAdvisories
High RHSA-2022:1792 1 CVE

Red Hat Security Advisory: flatpak security and bug fix update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 17

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak-debuginfo 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak-debugsource 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak-libs 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak-libs-debuginfo 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak-selinux 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak-session-helper 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak-session-helper-debuginfo 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream flatpak-tests-debuginfo 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb flatpak 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb flatpak-debuginfo 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb flatpak-debugsource 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb flatpak-devel 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb flatpak-libs-debuginfo 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb flatpak-session-helper 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb flatpak-session-helper-debuginfo 0:1.8.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::crb flatpak-tests-debuginfo 0:1.8.7-1.el8

Vulnerabilities 1

  • High 8.2
    CVE-2021-43860

    Permissions granted to applications can be hidden from the user at install time

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual permissions granted to the app …

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1980438
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2010533
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2041590
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1792.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-43860
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-43860
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-43860
  • article
    https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j