Debian Security Update DSA-4984 flatpak - security update

LinuxBot

Member
Joined
Apr 25, 2017
Messages
5,944
Reaction score
80
Credits
-1,257
It was discovered that sandbox restrictions in Flatpak, an application deployment framework for desktop apps, could be bypassed for a Flatpak app with direct access to AF_UNIX sockets, by manipulating the VFS using mount-related syscalls that are not blocked by Flatpak's denylist seccomp filter.

Continue reading...
 


Follow Linux.org

Members online


Top