TI-2024-21357 CVE-2024-32462
Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing
Priority LOW 39
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
RHSA-2024:3980
flatpak security update
Released 2024-06-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) flatpak-1.0.9-13.el7_9, flatpak-libs-1.0.9-13.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) flatpak-builder-1.0.0-13.el7_9, flatpak-devel-1.0.9-13.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) flatpak-1.0.9-13.el7_9, flatpak-builder-1.0.0-13.el7_9, flatpak-devel-1.0.9-13.el7_9 +1
- Red Hat Enterprise Linux Server (v. 7) flatpak-1.0.9-13.el7_9, flatpak-libs-1.0.9-13.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) flatpak-builder-1.0.0-13.el7_9, flatpak-devel-1.0.9-13.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) flatpak-1.0.9-13.el7_9, flatpak-libs-1.0.9-13.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) flatpak-builder-1.0.0-13.el7_9, flatpak-devel-1.0.9-13.el7_9