shield Security update for flatpak

SUSE-SLE-Module-Desktop-Applications-15-2019-2185

This update for flatpak fixes the following issues: Security issues fixed: - CVE-2019-8308: Fixed a potential sandbox escape via /proc (bsc#1125431). - CVE-2019-11460: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl (bsc#1133043). - CVE-2019-11461: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl (bsc#1133041).

• Release Date
  Aug 20 2019
• References
  Bugzilla: 1125431, 1133043, 1133041
  CVEs: CVE-2019-11460, CVE-2019-8308, CVE-2019-11461
• Type
  security
• Severity
  moderate

cloud_download Downloads

Desktop Applications Module 15 ppc64le

• Packages
  flatpak
  OSTree based application bundles management

  0.10.4-4.10.1 lock rpm lock src

  flatpak-devel
  Development files for the flatpak library

  0.10.4-4.10.1 lock rpm

  libflatpak0
  OSTree based application bundle management library

  0.10.4-4.10.1 lock rpm

  typelib-1_0-Flatpak-1_0
  Introspection bindings for the flatpak library

  0.10.4-4.10.1 lock rpm

Desktop Applications Module 15 s390x

• Packages
  flatpak
  OSTree based application bundles management

  0.10.4-4.10.1 lock rpm lock src

  flatpak-devel
  Development files for the flatpak library

  0.10.4-4.10.1 lock rpm

  libflatpak0
  OSTree based application bundle management library

  0.10.4-4.10.1 lock rpm

  typelib-1_0-Flatpak-1_0
  Introspection bindings for the flatpak library

  0.10.4-4.10.1 lock rpm

Desktop Applications Module 15 aarch64

• Packages
  flatpak
  OSTree based application bundles management

  0.10.4-4.10.1 lock rpm lock src

  flatpak-devel
  Development files for the flatpak library

  0.10.4-4.10.1 lock rpm

  libflatpak0
  OSTree based application bundle management library

  0.10.4-4.10.1 lock rpm

  typelib-1_0-Flatpak-1_0
  Introspection bindings for the flatpak library

  0.10.4-4.10.1 lock rpm

Desktop Applications Module 15 x86_64

• Packages
  flatpak
  OSTree based application bundles management

  0.10.4-4.10.1 lock rpm lock src

  flatpak-devel
  Development files for the flatpak library

  0.10.4-4.10.1 lock rpm

  libflatpak0
  OSTree based application bundle management library

  0.10.4-4.10.1 lock rpm

  typelib-1_0-Flatpak-1_0
  Introspection bindings for the flatpak library

  0.10.4-4.10.1 lock rpm