Red Hat Security Advisory

RHSA-2023:7038

flatpak security, bug fix, and enhancement update

Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) flatpak-1.10.8-1.el8, flatpak-devel-1.10.8-1.el8, flatpak-session-helper-1.10.8-1.el8
Red Hat Enterprise Linux AppStream (v. 8) flatpak-1.10.8-1.el8, flatpak-libs-1.10.8-1.el8, flatpak-selinux-1.10.8-1.el8 +1

TI-2023-12679 CVE-2023-28100

MEDIUM 50

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00878 Published 2023-03-16 Partial fix · 1.10.8, 1.12.8 +2 CWE-20

TI-2023-12680 CVE-2023-28101

LOW 25

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00879 Published 2023-03-16 Partial fix · 1.10.8, 1.12.8 +2 CWE-116