MGASA-2021-0145 - Updated flatpak packages fix a security vulnerability

Publication date: 18 Mar 2021
URL: https://advisories.mageia.org/MGASA-2021-0145.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2021-21381

A potential attack where a flatpak application could use custom formatted
.desktop files to gain access to files on the host system (CVE-2021-21381).

References:
- https://bugs.mageia.org/show_bug.cgi?id=28575
- https://github.com/flatpak/flatpak/security/advisories/GHSA-xgh4-387p-hqpp
- https://github.com/flatpak/flatpak/releases/tag/1.10.2
- https://github.com/flatpak/flatpak/issues/4146
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21381

SRPMS:
- 8/core/flatpak-1.10.2-1.mga8