Advisories » MGASA-2021-0145

Updated flatpak packages fix a security vulnerability

Publication date: 18 Mar 2021
Modification date: 18 Mar 2021
Type: security
Affected Mageia releases : 8
CVE: CVE-2021-21381

Description

A potential attack where a flatpak application could use custom formatted
.desktop files to gain access to files on the host system (CVE-2021-21381).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=28575
• https://github.com/flatpak/flatpak/security/advisories/GHSA-xgh4-387p-hqpp
• https://github.com/flatpak/flatpak/releases/tag/1.10.2
• https://github.com/flatpak/flatpak/issues/4146
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21381

SRPMS

8/core

• flatpak-1.10.2-1.mga8