Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Rocky Linux 8 RLSA-2024:3961 Important: Flatpak Sandbox Escape Update

rocky
Calendar Grey July 2, 2024
Scroller Rockylinux
A vital security patch for Flatpak has been issued for Rocky Linux, tackling critical sandbox bypass vulnerabilities. Ensure your system's safety by applying updates.
Important: flatpak security update

Summary

An update is available for flatpak. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory security issue important sandbox flatpak escape Rocky Linux

RPMs

flatpak-0:1.12.9-1.el8_10.aarch64.rpm

flatpak-0:1.12.9-1.el8_10.i686.rpm

flatpak-0:1.12.9-1.el8_10.src.rpm

flatpak-0:1.12.9-1.el8_10.x86_64.rpm

flatpak-debuginfo-0:1.12.9-1.el8_10.aarch64.rpm

flatpak-debuginfo-0:1.12.9-1.el8_10.i686.rpm

flatpak-debuginfo-0:1.12.9-1.el8_10.x86_64.rpm

flatpak-debugsource-0:1.12.9-1.el8_10.aarch64.rpm

flatpak-debugsource-0:1.12.9-1.el8_10.i686.rpm

flatpak-debugsource-0:1.12.9-1.el8_10.x86_64.rpm

flatpak-devel-0:1.12.9-1.el8_10.aarch64.rpm

flatpak-devel-0:1.12.9-1.el8_10.i686.rpm

flatpak-devel-0:1.12.9-1.el8_10.x86_64.rpm

flatpak-libs-0:1.12.9-1.el8_10.aarch64.rpm

flatpak-libs-0:1.12.9-1.el8_10.i686.rpm

flatpak-libs-0:1.12.9-1.el8_10.x86_64.rpm

flatpak-libs-debuginfo-0:1.12.9-1.el8_10.aarch64.rpm

flatpak-libs-debuginfo-0:1.12.9-1.el8_10.i686.rpm

flatpak-libs-debuginfo-0:1.12.9-1.el8_10.x86_64.rpm

flatpak-selinux-0:1.12.9-1.el8_10.noarch.rpm

flatpak-session-helper-0:1.12.9-1.el8_10.aarch64.rpm

flatpak-session-helper-0:1.12.9-1.el8_10.i686.rpm

Read the Full Advisory

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2024-32462

Severity
important
Lowest
Low
Medium
High
Critical

Name: RLSA-2024:3961
Affected Products: Rocky Linux 8

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2275981


Topics%20covered

Topics Covered

security advisory security issue important sandbox flatpak escape Rocky Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.