Issued:
2021-11-09
Updated:
2021-11-09

RHEA-2021:4539 - Product Enhancement Advisory

Synopsis

flatpak bug fix and enhancement update

Type/Severity

Product Enhancement Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for flatpak is now available for Red Hat Enterprise Linux 8.

Description

Flatpak is a system for building, distributing, and running sandboxed
desktop applications on Linux.

Bug Fix(es) and Enhancement(s):

  • CVE-2021-41133 flatpak: sandbox bypass via recent VFS-manipulating

syscalls (BZ#2012868)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 8

SRPM
flatpak-1.8.5-5.el8_5.src.rpm SHA-256: deed646660c6cb1aae6129a372633330a25bc98bdac0d0ba7f672d4e61e14ea0
x86_64
flatpak-1.8.5-5.el8_5.x86_64.rpm SHA-256: e02ae55d2852fc3ca4c8e0ec507fa29414fbcafb6c7a0618cfed76b7e33f8b94
flatpak-debuginfo-1.8.5-5.el8_5.i686.rpm SHA-256: ad298fb7c741de318933bc2a6291a6a3d02da5c13790f7cc5a371dd963507d59
flatpak-debuginfo-1.8.5-5.el8_5.x86_64.rpm SHA-256: d04c720d65fe787167dd95be3c6eb4c1daab87ae44616712f81e7b1de8c92216
flatpak-debugsource-1.8.5-5.el8_5.i686.rpm SHA-256: 604149a7ab42d31b55b86cb8a22ac441be8c9bb142a2156f32ba3e55c5c7df7c
flatpak-debugsource-1.8.5-5.el8_5.x86_64.rpm SHA-256: bef9b547be4430368952c7d5c0c29ac3e6c967f5b255160466d3aee0c12f3b07
flatpak-libs-1.8.5-5.el8_5.i686.rpm SHA-256: e4e16bbf54972bd4bff2db5cb467034d64e3c133e7050fa2b46d517b3ab04db1
flatpak-libs-1.8.5-5.el8_5.x86_64.rpm SHA-256: 1cc6147f983a3c19c1df66b4898c031b4f375892048cb3212a9ffbe160a8b496
flatpak-libs-debuginfo-1.8.5-5.el8_5.i686.rpm SHA-256: e5166a874e25aacf1fa1f85c5b8b71999d8579220c1bae396d84880209fee305
flatpak-libs-debuginfo-1.8.5-5.el8_5.x86_64.rpm SHA-256: 8df873c2bfe462878f489590ae2d42fb6d978abb8238ae15517f36dc545632e8
flatpak-selinux-1.8.5-5.el8_5.noarch.rpm SHA-256: 7a8923874555438792d2ecd881d186b53189df0b05ed53fe6c04872f7347c04c
flatpak-session-helper-1.8.5-5.el8_5.x86_64.rpm SHA-256: db9f55c847d798e671706d57f9c4b91a60c45be69244ab2295d98e01511a1470
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.i686.rpm SHA-256: 00f25f9dfc44a6fc8c24165dada6207252904044c015b2e284db0abb4c69faeb
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.x86_64.rpm SHA-256: 8e586333f5f4b621504d619019a8ea6cdd04c85f2da2b5bd00834b380b2f3665
flatpak-tests-debuginfo-1.8.5-5.el8_5.i686.rpm SHA-256: a4756455dc69cb77ae09f232f4cf44e7152095b60143ca9dddc35bbb6bd9cfe8
flatpak-tests-debuginfo-1.8.5-5.el8_5.x86_64.rpm SHA-256: 6db594ebf3e4bdb8680514a313b81d84aa69e1758a77e8fda45aef7151da44de

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
flatpak-1.8.5-5.el8_5.src.rpm SHA-256: deed646660c6cb1aae6129a372633330a25bc98bdac0d0ba7f672d4e61e14ea0
s390x
flatpak-1.8.5-5.el8_5.s390x.rpm SHA-256: a65b0501811a24894bc915f9b53329f82f5193d45c182e97d5f75db96e41aaec
flatpak-debuginfo-1.8.5-5.el8_5.s390x.rpm SHA-256: 8532c03b4a5fdc5936273503eeb69287c86e53a7891d776e449dd441486273e3
flatpak-debugsource-1.8.5-5.el8_5.s390x.rpm SHA-256: ad37c67391ca7a87d62b162b760b3df2da884c7fbf7b6657b6bacabea2131601
flatpak-libs-1.8.5-5.el8_5.s390x.rpm SHA-256: 4bfac957c5934cf3f9e7fe9b678ca5ee3e846d0afffc79e7843787adf2d3dbfe
flatpak-libs-debuginfo-1.8.5-5.el8_5.s390x.rpm SHA-256: b01d04b1f601f40dd6fb485e2339ab43e3cb7fa3e7555eb06893ad236fd82b3c
flatpak-selinux-1.8.5-5.el8_5.noarch.rpm SHA-256: 7a8923874555438792d2ecd881d186b53189df0b05ed53fe6c04872f7347c04c
flatpak-session-helper-1.8.5-5.el8_5.s390x.rpm SHA-256: 4c078ad86381bdd937c9ac6691a84f95a4370c364ff8814530be879d4cbf9420
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.s390x.rpm SHA-256: 88ccd59f8be01a0274ab433f2bc17ec2a2b9a7bd19e4237b57cfc870c9344046
flatpak-tests-debuginfo-1.8.5-5.el8_5.s390x.rpm SHA-256: 2a46056531593bb15162710980792671695467b0c138c950d4b6a2b86f318e18

Red Hat Enterprise Linux for Power, little endian 8

SRPM
flatpak-1.8.5-5.el8_5.src.rpm SHA-256: deed646660c6cb1aae6129a372633330a25bc98bdac0d0ba7f672d4e61e14ea0
ppc64le
flatpak-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 7749cd0720689d67038fddebec1a417aaf664fa837d9cf3f85457195b2f8e59d
flatpak-debuginfo-1.8.5-5.el8_5.ppc64le.rpm SHA-256: d00c8412b5a10551925af0d1b342a2931376c3c55f7986ac918dd6039a5a6448
flatpak-debugsource-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 7030e3c2d3f9b5b16e07e2e6374420794de79bfcdb010be806048f33104f95ad
flatpak-libs-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 6e35e8c422f6dde82be2ec859e775133a56a4b255d92c517f3107e6d26c5149a
flatpak-libs-debuginfo-1.8.5-5.el8_5.ppc64le.rpm SHA-256: bc02978303d06e95ae84c2f3b42c0b6af5035f354f015a3554cfcfed4b67b298
flatpak-selinux-1.8.5-5.el8_5.noarch.rpm SHA-256: 7a8923874555438792d2ecd881d186b53189df0b05ed53fe6c04872f7347c04c
flatpak-session-helper-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 7268d2b34ad96b47c26bf7a5be47c39ff27af7a09898c7c9bf2c2a74a8b8f669
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 8ea40a9bcdb440b6e0ef2a3b35df06f603e62f2fa87f3fb2777dc6042bf54f1b
flatpak-tests-debuginfo-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 4e9e377a66ac3c69f6dc20699f73ae0ec3392a6b2ea13eef7342cc2c6f092003

Red Hat Enterprise Linux for ARM 64 8

SRPM
flatpak-1.8.5-5.el8_5.src.rpm SHA-256: deed646660c6cb1aae6129a372633330a25bc98bdac0d0ba7f672d4e61e14ea0
aarch64
flatpak-1.8.5-5.el8_5.aarch64.rpm SHA-256: eca61174d38593a5d10830032179576c0d26ec1742306cf66292acd7cbc8391b
flatpak-debuginfo-1.8.5-5.el8_5.aarch64.rpm SHA-256: d7fb21fd5ca6927b6de80b6f30827665d563b3c74ac82903a7daf1215a4c8334
flatpak-debugsource-1.8.5-5.el8_5.aarch64.rpm SHA-256: 0e3fc3c5b43f81e014d79a81b582494e4807e0ac5199f93cd2b79ff64926575a
flatpak-libs-1.8.5-5.el8_5.aarch64.rpm SHA-256: 8ec07b7d4acbfa47d104ec2528d576f4253366e5db148d83fb1ccb55066486fe
flatpak-libs-debuginfo-1.8.5-5.el8_5.aarch64.rpm SHA-256: 9925ca4913d5b8ae4db2ba00aac75b1b8ec724efd2cc5992dbc98033396aff61
flatpak-selinux-1.8.5-5.el8_5.noarch.rpm SHA-256: 7a8923874555438792d2ecd881d186b53189df0b05ed53fe6c04872f7347c04c
flatpak-session-helper-1.8.5-5.el8_5.aarch64.rpm SHA-256: 38cf7c01e7f35078836b1837b48e8533b15fd610b5d5a1f167b9670e9ec5aea4
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.aarch64.rpm SHA-256: 699206e448748e43d3e490379d3b50aa4ed80746475ea6795b9231fa6b2b8797
flatpak-tests-debuginfo-1.8.5-5.el8_5.aarch64.rpm SHA-256: d987cfb3355c0696fcbba407a673d575f8591ce6eecb368fc2224989667320f0

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
flatpak-1.8.5-5.el8_5.i686.rpm SHA-256: 3db5da6083bf4d8db987630660dd46d31368327943f06534a26ba3b77b8c560c
flatpak-debuginfo-1.8.5-5.el8_5.i686.rpm SHA-256: ad298fb7c741de318933bc2a6291a6a3d02da5c13790f7cc5a371dd963507d59
flatpak-debuginfo-1.8.5-5.el8_5.x86_64.rpm SHA-256: d04c720d65fe787167dd95be3c6eb4c1daab87ae44616712f81e7b1de8c92216
flatpak-debugsource-1.8.5-5.el8_5.i686.rpm SHA-256: 604149a7ab42d31b55b86cb8a22ac441be8c9bb142a2156f32ba3e55c5c7df7c
flatpak-debugsource-1.8.5-5.el8_5.x86_64.rpm SHA-256: bef9b547be4430368952c7d5c0c29ac3e6c967f5b255160466d3aee0c12f3b07
flatpak-devel-1.8.5-5.el8_5.i686.rpm SHA-256: a32a1784be9cb9953969d1c1111cc5f1e1f3311bb29081840d26bcab6df73232
flatpak-devel-1.8.5-5.el8_5.x86_64.rpm SHA-256: b4cbb8751a22837526bc3dac89868cd1781dbf07bc30fdb714880f379130964a
flatpak-libs-debuginfo-1.8.5-5.el8_5.i686.rpm SHA-256: e5166a874e25aacf1fa1f85c5b8b71999d8579220c1bae396d84880209fee305
flatpak-libs-debuginfo-1.8.5-5.el8_5.x86_64.rpm SHA-256: 8df873c2bfe462878f489590ae2d42fb6d978abb8238ae15517f36dc545632e8
flatpak-session-helper-1.8.5-5.el8_5.i686.rpm SHA-256: 63e88825c6b197aa80f2a465b8269f3ab3a00d8f560630a09a859a551c0356fe
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.i686.rpm SHA-256: 00f25f9dfc44a6fc8c24165dada6207252904044c015b2e284db0abb4c69faeb
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.x86_64.rpm SHA-256: 8e586333f5f4b621504d619019a8ea6cdd04c85f2da2b5bd00834b380b2f3665
flatpak-tests-debuginfo-1.8.5-5.el8_5.i686.rpm SHA-256: a4756455dc69cb77ae09f232f4cf44e7152095b60143ca9dddc35bbb6bd9cfe8
flatpak-tests-debuginfo-1.8.5-5.el8_5.x86_64.rpm SHA-256: 6db594ebf3e4bdb8680514a313b81d84aa69e1758a77e8fda45aef7151da44de

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
flatpak-debuginfo-1.8.5-5.el8_5.ppc64le.rpm SHA-256: d00c8412b5a10551925af0d1b342a2931376c3c55f7986ac918dd6039a5a6448
flatpak-debugsource-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 7030e3c2d3f9b5b16e07e2e6374420794de79bfcdb010be806048f33104f95ad
flatpak-devel-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 5dd8af50f794b8dcebc24ea6af2cffbaca043c9ab4361c7f92f57253f20efb2d
flatpak-libs-debuginfo-1.8.5-5.el8_5.ppc64le.rpm SHA-256: bc02978303d06e95ae84c2f3b42c0b6af5035f354f015a3554cfcfed4b67b298
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 8ea40a9bcdb440b6e0ef2a3b35df06f603e62f2fa87f3fb2777dc6042bf54f1b
flatpak-tests-debuginfo-1.8.5-5.el8_5.ppc64le.rpm SHA-256: 4e9e377a66ac3c69f6dc20699f73ae0ec3392a6b2ea13eef7342cc2c6f092003

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
flatpak-debuginfo-1.8.5-5.el8_5.aarch64.rpm SHA-256: d7fb21fd5ca6927b6de80b6f30827665d563b3c74ac82903a7daf1215a4c8334
flatpak-debugsource-1.8.5-5.el8_5.aarch64.rpm SHA-256: 0e3fc3c5b43f81e014d79a81b582494e4807e0ac5199f93cd2b79ff64926575a
flatpak-devel-1.8.5-5.el8_5.aarch64.rpm SHA-256: ad2724c7854f5c60ab20c3e6250a3d06220be496b6e694d9b0db6e68996b7015
flatpak-libs-debuginfo-1.8.5-5.el8_5.aarch64.rpm SHA-256: 9925ca4913d5b8ae4db2ba00aac75b1b8ec724efd2cc5992dbc98033396aff61
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.aarch64.rpm SHA-256: 699206e448748e43d3e490379d3b50aa4ed80746475ea6795b9231fa6b2b8797
flatpak-tests-debuginfo-1.8.5-5.el8_5.aarch64.rpm SHA-256: d987cfb3355c0696fcbba407a673d575f8591ce6eecb368fc2224989667320f0

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
flatpak-debuginfo-1.8.5-5.el8_5.s390x.rpm SHA-256: 8532c03b4a5fdc5936273503eeb69287c86e53a7891d776e449dd441486273e3
flatpak-debugsource-1.8.5-5.el8_5.s390x.rpm SHA-256: ad37c67391ca7a87d62b162b760b3df2da884c7fbf7b6657b6bacabea2131601
flatpak-devel-1.8.5-5.el8_5.s390x.rpm SHA-256: 3a3f974675c7b4d1a87c2d4e5eabedf6585b6bdce9096b22566732e925cf001b
flatpak-libs-debuginfo-1.8.5-5.el8_5.s390x.rpm SHA-256: b01d04b1f601f40dd6fb485e2339ab43e3cb7fa3e7555eb06893ad236fd82b3c
flatpak-session-helper-debuginfo-1.8.5-5.el8_5.s390x.rpm SHA-256: 88ccd59f8be01a0274ab433f2bc17ec2a2b9a7bd19e4237b57cfc870c9344046
flatpak-tests-debuginfo-1.8.5-5.el8_5.s390x.rpm SHA-256: 2a46056531593bb15162710980792671695467b0c138c950d4b6a2b86f318e18

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.