Mageia 2021-0145: flatpak security update
Summary
A potential attack where a flatpak application could use custom formatted
.desktop files to gain access to files on the host system (CVE-2021-21381).
References
- https://bugs.mageia.org/show_bug.cgi?id=28575
- https://github.com/flatpak/flatpak/security/advisories/GHSA-xgh4-387p-hqpp
- https://github.com/flatpak/flatpak/releases/tag/1.10.2
- https://github.com/flatpak/flatpak/issues/4146
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21381
Resolution
MGASA-2021-0145 - Updated flatpak packages fix a security vulnerability
SRPMS
- 8/core/flatpak-1.10.2-1.mga8