Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Mageia 8: 2021-0145 Moderate: Flatpak File Access Concern

mageia
Calendar Grey March 18, 2021
Dist Mageia Esm H88
Mageia 2021-0146 outlines a vital flatpak patch aimed at rectifying serious vulnerabilities linked to personalized .desktop configurations.
A potential attack where a flatpak application could use custom formatted .desktop files to gain access to files on the host system (CVE-2021-21381)

Summary

A potential attack where a flatpak application could use custom formatted .desktop files to gain access to files on the host system (CVE-2021-21381).

References

- https://bugs.mageia.org/show_bug.cgi?id=28575

- https://github.com/flatpak/flatpak/security/advisories/GHSA-xgh4-387p-hqpp

- https://github.com/flatpak/flatpak/releases/tag/1.10.2

- https://github.com/flatpak/flatpak/issues/4146

- https://www.cve.org/CVERecord?id=CVE-2021-21381

Topics%20covered

Topics Covered

security advisory moderate security issue access control moderate threat file access Mageia flatpak

Resolution

SRPMS

- 8/core/flatpak-1.10.2-1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 18 Mar 2021
URL: https://advisories.mageia.org/MGASA-2021-0145.html
Type: security
CVE: CVE-2021-21381

Topics%20covered

Topics Covered

security advisory moderate security issue access control moderate threat file access Mageia flatpak

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here