Search CVE reports
1 – 10 of 30 results
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal....
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an arbitrary location. The filenames and content are not attacker controlled,...
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Not affected | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Not affected | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
[GHSA-9rww-v4mm-x4jg]
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| flatpak | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |