—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512<\/p>\n
– ————————————————————————-
Debian Security Advisory DSA-5749-1 security@debian.org
https:\/\/www.debian.org\/security\/ Salvatore Bonaccorso
August 14, 2024 https:\/\/www.debian.org\/security\/faq
– ————————————————————————-<\/p>\n
Package : flatpak
CVE ID : CVE-2024-42472<\/p>\n
Chris Williams discovered a flaw in the handling of mounts for
persistent directories in Flatpak, an application deployment framework
for desktop apps. A malicious or compromised Flatpak app using
persistent directories could take advantage of this flaw to access files
outside of the sandbox.<\/p>\n
Details can be found in the upstream advisory at
https:\/\/github.com\/flatpak\/flatpak\/security\/advisories\/GHSA-7hgv-f2j8-xw87<\/p>\n
For the stable distribution (bookworm), this problem has been fixed in
version 1.14.10-1~deb12u1. To address the vulnerability, flatpak uses a
new feature provided in bubblewrap and provided in version
0.8.0-2+deb12u1 along with this update.<\/p>\n
We recommend that you upgrade your flatpak packages.<\/p>\n
For the detailed security status of flatpak please refer to its security
tracker page at:
https:\/\/security-tracker.debian.org\/tracker\/flatpak<\/p>\n
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https:\/\/www.debian.org\/security\/<\/p>\n
Mailing list: debian-security-announce@lists.debian.org
—–BEGIN PGP SIGNATURE—–<\/p>\n
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAma9F2xfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0RINg\/+OTenWEWdoatoO7F+184SOoVMYmmJTP2xtvuE8XC6S6NAcrYzjRQD1nyy
xJK1IFmNjJrTf4HhfFTq2raOy60T6KRa0y71R1QS4+JOwNjdtr+zzDxdybXzg06T
SOBKaLmped3PY4djFxoYnl9wEDLM+QAQuTWvnZugim4frEErmtlulwHRDA\/qhWKT
mzFiJgSWB7EJL61ddh2YVexru0b5rD6gyYcD7JoulbFjsOwvKyJhI4j1uuOrbNoj
7aArjlu9D3KymGQgCc5gg8yVp5Gt\/ZFYsmFJ5BdAl5a8LmTBM4mMTDIsK39mPoLo
waxpP0bJIfCxkNB+YOyJRPdj4mtT44nwDcG\/LyM+M+f+R0HUr4Apftloheb72A0q
XUS2tRrBEs0CzToeuwkIoo2XLQt7\/vQ4HFMU47gtk6ZDKqIk7hWD0zcny8x3wL+p
\/Syd2xOA\/KEmbLWFRDzoVVxpmLdkbqGJn+5p5FObMjOPNOFKyMs0Q7HukwKbyPGn
YRhg1lcmOn30MWVFol2Z1Ex74IB\/\/Wu\/az7YZ4UIId1Y734NUVXEoTLvXGKV8Hnx
9m\/0imWcz51T5DLqCv7MUX1i9V2s2R3Hj8GqQfVQTA39IH4GEmpZMR33XH\/jvCDu
p1GDW2KzIzObmLu+Kjkeg3NzRl\/pKdDFiJncdNVG0PPhEn2hUY0=
=hd0W
—–END PGP SIGNATURE—–<\/p>\n","protected":false},"excerpt":{"rendered":"
—–BEGIN PGP SIGNED MESSAGE—–Hash: SHA512 – ————————————————————————-Debian Security Advisory DSA-5749-1 security@debian.orghttps:\/\/www.debian.org\/security\/ Salvatore BonaccorsoAugust 14, 2024 https:\/\/www.debian.org\/security\/faq– ————————————————————————- Package : flatpakCVE ID : CVE-2024-42472 Chris Williams discovered a flaw in the handling of mounts forpersistent directories in Flatpak, an application deployment frameworkfor desktop apps. A malicious or compromised Flatpak app usingpersistent directories could take advantage of …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-58902","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58902","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=58902"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58902\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=58902"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=58902"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=58902"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}