openSUSE: 2021:3472-1 important: flatpak
Description
This update for flatpak fixes the following issues: - Update to version 1.10.5: - CVE-2021-41133: Fixed a bug that could lead to sandbox bypass via recent VFS-manipulating syscalls. (bsc#1191507)
Patch
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3472=1
Package List
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): flatpak-1.10.5-4.9.1 flatpak-debuginfo-1.10.5-4.9.1 flatpak-debugsource-1.10.5-4.9.1 flatpak-devel-1.10.5-4.9.1 flatpak-zsh-completion-1.10.5-4.9.1 libflatpak0-1.10.5-4.9.1 libflatpak0-debuginfo-1.10.5-4.9.1 system-user-flatpak-1.10.5-4.9.1 typelib-1_0-Flatpak-1_0-1.10.5-4.9.1
References
https://www.suse.com/security/cve/CVE-2021-41133.html https://bugzilla.suse.com/1191507