Red Hat Product Errata RHSA-2024:3979 - Security Advisory
Issued:
2024-06-18
Updated:
2024-06-18

RHSA-2024:3979 - Security Advisory

Synopsis

Important: flatpak security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for flatpak is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

Fixes

  • BZ - 2275981 - CVE-2024-32462 flatpak: sandbox escape via RequestBackground portal

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
flatpak-1.6.2-7.el8_2.src.rpm SHA-256: 2928f406868d95de47f6ea9e74d61f94c4d699184adc07d24536c00075792851
x86_64
flatpak-1.6.2-7.el8_2.x86_64.rpm SHA-256: 5d200cdfee0eb8a55002a913bb0bd65385d68b20d38ba4c8d866204ce3bf56ec
flatpak-debuginfo-1.6.2-7.el8_2.i686.rpm SHA-256: 5a93eeab8edbbad6f516f6b65eb03f2c481e6c10b3fce9701e0e712722457e5b
flatpak-debuginfo-1.6.2-7.el8_2.x86_64.rpm SHA-256: 5cab8e58ce7818cb8e4b6c181615b41679e8b61e999bcbdcb77d06133d6aee74
flatpak-debugsource-1.6.2-7.el8_2.i686.rpm SHA-256: bd166967da605d71d149fb229393a0e27becbf6227d802ec4d055b7278f74f4f
flatpak-debugsource-1.6.2-7.el8_2.x86_64.rpm SHA-256: 756a674b365887284dcea07bfec1349eb40e894bf990fc7e9029f0138339e3e3
flatpak-libs-1.6.2-7.el8_2.i686.rpm SHA-256: fdb7293c1b12e92107b95f8fa1b7ba8925b765d82a95e02f7c94b67b1de98d68
flatpak-libs-1.6.2-7.el8_2.x86_64.rpm SHA-256: 10aa293d50cb79aeefbe1e28bbae0a12f424462ee7cbeacdf105936a68012a37
flatpak-libs-debuginfo-1.6.2-7.el8_2.i686.rpm SHA-256: 0c762283b663016e0626fd61ba5df65da4895e1b10df40f5ca14086f20b54408
flatpak-libs-debuginfo-1.6.2-7.el8_2.x86_64.rpm SHA-256: d244d99f24feda6b682a11e6eabd971ee48d58bc143ce5b72229ec7e630b84ad
flatpak-selinux-1.6.2-7.el8_2.noarch.rpm SHA-256: 91afa217a17f720f92409b97d68c719a3e509f8160f80a54b56a6efd5bbbd5d6
flatpak-session-helper-1.6.2-7.el8_2.x86_64.rpm SHA-256: 424e9b3b1b30b01f4354117c236bb23d1f8f8f010c9453403e62d8ff976dabf1
flatpak-session-helper-debuginfo-1.6.2-7.el8_2.i686.rpm SHA-256: ab05b4d106b54a70458047e4c778c38547d0c1bb588e364ef692c36aecac2b2c
flatpak-session-helper-debuginfo-1.6.2-7.el8_2.x86_64.rpm SHA-256: 236da12a795e455f4db73c1a18eaaa2d044cd128a6bb214e797686becaea24fc
flatpak-tests-debuginfo-1.6.2-7.el8_2.i686.rpm SHA-256: 7e21fd1d42c77465aa822f22deebb578e86bd22eca212c15028e63469b2f22d3
flatpak-tests-debuginfo-1.6.2-7.el8_2.x86_64.rpm SHA-256: 7d0f6c54ced222a1950961aa7db9afd0e3fa7fce1805318923a04cb55fd879f8

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.