Issued at: 2024-09-17
Updated at: 2024-09-17
Synopsis
Important: bubblewrap and flatpak security update
Description
Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.
Security Fix(es):
* flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 8 aarch64
Rocky Linux 8 x86_64
Fixes
CVEs
CVE-2024-42472
Affected packages
Rocky Linux 8 aarch64 - BaseOS
bubblewrap-0:0.4.0-2.el8_10.aarch64.rpm
bubblewrap-0:0.4.0-2.el8_10.src.rpm
bubblewrap-debuginfo-0:0.4.0-2.el8_10.aarch64.rpm
bubblewrap-debugsource-0:0.4.0-2.el8_10.aarch64.rpm
Rocky Linux 8 x86_64 - BaseOS
bubblewrap-0:0.4.0-2.el8_10.src.rpm
bubblewrap-0:0.4.0-2.el8_10.x86_64.rpm
bubblewrap-debuginfo-0:0.4.0-2.el8_10.x86_64.rpm
bubblewrap-debugsource-0:0.4.0-2.el8_10.x86_64.rpm
Rocky Linux 8 aarch64 - AppStream
flatpak-0:1.12.9-3.el8_10.aarch64.rpm
flatpak-0:1.12.9-3.el8_10.src.rpm
flatpak-debuginfo-0:1.12.9-3.el8_10.aarch64.rpm
flatpak-debugsource-0:1.12.9-3.el8_10.aarch64.rpm
flatpak-libs-0:1.12.9-3.el8_10.aarch64.rpm
flatpak-libs-debuginfo-0:1.12.9-3.el8_10.aarch64.rpm
flatpak-selinux-0:1.12.9-3.el8_10.noarch.rpm
flatpak-session-helper-0:1.12.9-3.el8_10.aarch64.rpm
flatpak-session-helper-debuginfo-0:1.12.9-3.el8_10.aarch64.rpm
Rocky Linux 8 x86_64 - PowerTools
flatpak-0:1.12.9-3.el8_10.i686.rpm
flatpak-devel-0:1.12.9-3.el8_10.i686.rpm
flatpak-devel-0:1.12.9-3.el8_10.x86_64.rpm
flatpak-session-helper-0:1.12.9-3.el8_10.i686.rpm
flatpak-session-helper-debuginfo-0:1.12.9-3.el8_10.i686.rpm
Rocky Linux 8 x86_64 - AppStream
flatpak-0:1.12.9-3.el8_10.src.rpm
flatpak-0:1.12.9-3.el8_10.x86_64.rpm
flatpak-debuginfo-0:1.12.9-3.el8_10.i686.rpm
flatpak-debuginfo-0:1.12.9-3.el8_10.x86_64.rpm
flatpak-debugsource-0:1.12.9-3.el8_10.i686.rpm
flatpak-debugsource-0:1.12.9-3.el8_10.x86_64.rpm
flatpak-libs-0:1.12.9-3.el8_10.i686.rpm
flatpak-libs-0:1.12.9-3.el8_10.x86_64.rpm
flatpak-libs-debuginfo-0:1.12.9-3.el8_10.i686.rpm
flatpak-libs-debuginfo-0:1.12.9-3.el8_10.x86_64.rpm
flatpak-selinux-0:1.12.9-3.el8_10.noarch.rpm
flatpak-session-helper-0:1.12.9-3.el8_10.x86_64.rpm
flatpak-session-helper-debuginfo-0:1.12.9-3.el8_10.x86_64.rpm
Rocky Linux 8 aarch64 - PowerTools
flatpak-devel-0:1.12.9-3.el8_10.aarch64.rpm