Scientific Linux alert SLSA-2021:0411-1 (flatpak)

From:
             
 
Pat Riehecky <riehecky@fnal.gov>
To:
             
 
scientific-linux-errata@listserv.fnal.gov
Subject:
             
 
Security ERRATA Important: flatpak on SL7.x x86_64
Date:
             
 
Fri, 05 Feb 2021 14:25:28 -0000
Message-ID:
             
 
<20210205142528.16525.67917...@fnal.gov>
Synopsis:          Important: flatpak security update
Advisory ID:       SLSA-2021:0411-1
Issue Date:        2021-02-05
CVE Numbers:       CVE-2021-21261
--

Security Fix(es):

* flatpak: sandbox escape via spawn portal (CVE-2021-21261)
--

SL7
  x86_64
    flatpak-1.0.9-10.el7_9.x86_64.rpm
    flatpak-debuginfo-1.0.9-10.el7_9.x86_64.rpm
    flatpak-libs-1.0.9-10.el7_9.x86_64.rpm
    flatpak-builder-1.0.0-10.el7_9.x86_64.rpm
    flatpak-devel-1.0.9-10.el7_9.x86_64.rpm

- Scientific Linux Development Team