Red Hat Security Advisory

RHSA-2023:6518

flatpak security, bug fix, and enhancement update

Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) flatpak-1.12.8-1.el9, flatpak-devel-1.12.8-1.el9, flatpak-session-helper-1.12.8-1.el9
Red Hat Enterprise Linux AppStream (v. 9) flatpak-1.12.8-1.el9, flatpak-libs-1.12.8-1.el9, flatpak-selinux-1.12.8-1.el9 +1

TI-2023-12679 CVE-2023-28100

MEDIUM 50

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00878 Published 2023-03-16 Partial fix · 1.10.8, 1.12.8 +2 CWE-20

TI-2023-12680 CVE-2023-28101

LOW 25

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00879 Published 2023-03-16 Partial fix · 1.10.8, 1.12.8 +2 CWE-116