[CLSA-2025:1740132708] flatpak: Fix of CVE-2023-28100
Type:
security
Severity:
Moderate
Release date:
2025-02-21 10:12:53 UTC
Description:
- CVE-2023-28100: fix issue where Flatpak could copy text from Linux virtual console and paste it into command buffer, potentially leading to command execution
Updated packages:
  • flatpak-1.12.7-2.el9.tuxcare.els1.i686.rpm
    sha:8572062f1f5fb9c1a172e590f9d05d273355bc5943e5bcd59a74b595970b8f6e
  • flatpak-1.12.7-2.el9.tuxcare.els1.x86_64.rpm
    sha:fc2285acd650935a0dea28dc47caf58f0182db418996c92ecedcc22231d9ac62
  • flatpak-devel-1.12.7-2.el9.tuxcare.els1.i686.rpm
    sha:155e4b47ca9375d383b5d2c0dcdc0b63f3b36dfd40a18c73e45d27dd73449a0f
  • flatpak-devel-1.12.7-2.el9.tuxcare.els1.x86_64.rpm
    sha:43504be79a45d2776d35f96ee83ca80977f8270a22ad9b113f1a39d40c57b60d
  • flatpak-libs-1.12.7-2.el9.tuxcare.els1.i686.rpm
    sha:9852422e6e685f279f3915a4774f5d606f4c6a1be6cedee27a5962e22f2fd006
  • flatpak-libs-1.12.7-2.el9.tuxcare.els1.x86_64.rpm
    sha:e25f0e6053a085aadc931d8c33d2413ccec1700b32215fa37463fbc49b294a4a
  • flatpak-selinux-1.12.7-2.el9.tuxcare.els1.noarch.rpm
    sha:e1efca1168b1c153c345602d95da46813e60cf9352f6063ce221ea1608c4497a
  • flatpak-session-helper-1.12.7-2.el9.tuxcare.els1.i686.rpm
    sha:eb98af0cc1cf4b678c54cac86fc046f3771aa331b3199a035c0ad5fc5155a4d0
  • flatpak-session-helper-1.12.7-2.el9.tuxcare.els1.x86_64.rpm
    sha:dae886f2b5ca1977fd8238320045e66661ddc03b772ed222959d9d8ff01ec60f
  • flatpak-tests-1.12.7-2.el9.tuxcare.els1.x86_64.rpm
    sha:ed01db35f9c3656ce9d57649cbb62660c5a058c708cb48d9dae40705c2ec9eff
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.