GNU bug report logs - #73059
Flatpak is vulnerable to CVE-2024-42472

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 73059 in the body.
You can then email your comments to 73059 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: DonaldSanders1968 <DonaldSanders1968 <at> protonmail.ch>
To: "bug-guix <at> gnu.org" <bug-guix <at> gnu.org>
Subject: Flatpak is vulnerable to CVE-2024-42472
Date: Thu, 05 Sep 2024 17:36:12 +0000

[Message part 1 (text/plain, inline)]

Hi Guix,

Current flatpak version in Guix channel is affected by [CVE-2024-42472](https://github.com/flatpak/flatpak/security/advisories/GHSA-7hgv-f2j8-xw87).

Kind regards,
Donald

[Message part 2 (text/html, inline)]

Message #8 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>
To: DonaldSanders1968 via Bug reports for GNU Guix <bug-guix <at> gnu.org>
Cc: 73059-done <at> debbugs.gnu.org,
 DonaldSanders1968 <DonaldSanders1968 <at> protonmail.ch>
Subject: Re: bug#73059: Flatpak is vulnerable to CVE-2024-42472
Date: Fri, 06 Sep 2024 22:48:38 +0800

[Message part 1 (text/plain, inline)]

DonaldSanders1968 via Bug reports for GNU Guix <bug-guix <at> gnu.org> writes:

> Hi Guix,
>
> Current flatpak version in Guix channel is affected by CVE-2024-42472. 
>
> Kind regards,
>
> Donald

Thanks, update bubblewrap and it.

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.