Skip to content
OpenAdvisories
High RLSA-2024:3959 1 CVE

Important: flatpak security update

Published Jul 2, 2024 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 flatpak 0:1.12.9-1.el9_4

Vulnerabilities 1

  • High 8.4
    CVE-2024-32462 Public exploit

    Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the …

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2275981