RHSA-2024:6421
RHSA-2024:6421 · Red Hat Security Advisory: bubblewrap and flatpak security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: bubblewrap and flatpak security update
CVSS 7.4 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
flatpak Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-debuginfo Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-debugsource Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-libs Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-libs-debuginfo Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-selinux Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-session-helper Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-session-helper-debuginfo Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-tests-debuginfo Red Hat:rhel_aus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-debuginfo Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-debugsource Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-libs Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-libs-debuginfo Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-selinux Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-session-helper Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-session-helper-debuginfo Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-tests-debuginfo Red Hat:rhel_e4s:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak Red Hat:rhel_tus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-debuginfo Red Hat:rhel_tus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-debugsource Red Hat:rhel_tus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-libs Red Hat:rhel_tus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-libs-debuginfo Red Hat:rhel_tus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
flatpak-selinux Red Hat:rhel_tus:8.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:1.8.7-4.el8_6
Update to 0:1.8.7-4.el8_6
Original sources
- https://access.redhat.com/errata/RHSA-2024:6421
- https://access.redhat.com/security/updates/classification/#important
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6421.json
- https://access.redhat.com/security/cve/CVE-2024-42472
- https://bugzilla.redhat.com/show_bug.cgi?id=2305202
- https://www.cve.org/CVERecord?id=CVE-2024-42472
- https://nvd.nist.gov/vuln/detail/CVE-2024-42472
- https://github.com/containers/bubblewrap/commit/68e75c3091c87583c28a439b45c45627a94d622c
- https://github.com/containers/bubblewrap/commit/a253257cd298892da43e15201d83f9a02c9b58b5
- https://github.com/flatpak/flatpak/commit/2cdd1e1e5ae90d7c3a4b60ce2e36e4d609e44e72
- https://github.com/flatpak/flatpak/commit/3caeb16c31a3ed62d744e2aaf01d684f7991051a
- https://github.com/flatpak/flatpak/commit/6bd603f6836e9b38b9b937d3b78f3fbf36e7ff75
- https://github.com/flatpak/flatpak/commit/7c63e53bb2af0aae9097fd2edfd6a9ba9d453e97
- https://github.com/flatpak/flatpak/commit/8a18137d7e80f0575e8defabf677d81e5cc3a788
- https://github.com/flatpak/flatpak/commit/db3a785241fda63bf53f0ec12bb519aa5210de19
- https://github.com/flatpak/flatpak/security/advisories/GHSA-7hgv-f2j8-xw87
- https://osv.dev/vulnerability/RHSA-2024:6421