Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 522
Alerts This Week
Warning Icon 1 522

CentOS 8: 2021-8a0c17b7e3 Critical: Docker Container Exploit

fedora
Calendar Grey July 12, 2017
Dist Fedora Esm H88
Patch for Flatpak on Fedora 24 resolves vulnerability related to privilege escalation identified as CVE-2017-9780. Critical for application security.
Security fix for CVE-2017-9780 Update to 0.8.7

Summary

flatpak is a system for building, distributing and running sandboxed desktop

applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for

more information.

Security fix for CVE-2017-9780 Update to 0.8.7

[ 1 ] Bug #1465025 - CVE-2017-9780 flatpak: Privilege escalation via setuid/world-writable file permissions

https://bugzilla.redhat.com/show_bug.cgi?id=1465025

su -c 'dnf upgrade flatpak' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Topics%20covered

Topics Covered

security advisory moderate fedora software update privilege escalation security fix flatpak

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 24
Version: 0.8.7
Release: 1.fc24
URL: https://flatpak.org/
Summary: Application deployment framework for desktop apps

Topics%20covered

Topics Covered

security advisory moderate fedora software update privilege escalation security fix flatpak

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.