RHSA-2024:3960: Important: flatpak security update
Published Jun 17, 2024
·Updated
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.Security Fix(es): flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
Affected Software
50 affected componentsFixes available
redhat/flatpak<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-debugsource<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-debugsource<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-libs<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-libs<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-libs-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-libs-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-selinux<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-session-helper<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-session-helper-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-session-helper-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-tests-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-tests-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-session-helper<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-debugsource<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-libs<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-libs-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-session-helper<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-session-helper-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-tests-debuginfo<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
redhat/flatpak-debuginfo<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
redhat/flatpak-debugsource<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
redhat/flatpak-libs<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
redhat/flatpak-libs-debuginfo<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
redhat/flatpak-session-helper<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
redhat/flatpak-session-helper-debuginfo<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
redhat/flatpak-tests-debuginfo<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
redhat/flatpak-devel<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-devel<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-devel<1.12.7-3.el9_2
1.12.7-3.el9_2
redhat/flatpak-devel<1.12.7-3.el9_2.aa
1.12.7-3.el9_2.aa
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Remediation
Event History
Jun 17, 2024
Advisory Published
via Red Hat·03:45 PM
Jul 7, 2024
Advisory Published
via Red Hat·04:52 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:3960?
The severity of RHSA-2024:3960 is classified as important.
2
How do I fix RHSA-2024:3960?
To fix RHSA-2024:3960, update to flatpak version 1.12.7-3.el9_2.
3
Which software is affected by RHSA-2024:3960?
RHSA-2024:3960 affects various Red Hat Enterprise Linux products and their respective architectures.
4
What type of vulnerability does RHSA-2024:3960 address?
RHSA-2024:3960 addresses a security vulnerability in the flatpak package.
5
Is there a detailed change log for RHSA-2024:3960?
RHSA-2024:3960 provides updates relevant to the security issues but does not specify a detailed change log in this advisory.