CVE:CVE-2019-8308
CNNVD:CNNVD-201902-512
Flatpak是一套用于Linux桌面应用计算机环境的应用程序虚拟化系统。
Flatpak 1.0.7之前版本、1.1.x版本和1.2.3之前的1.2.x版本中存在安全漏洞。攻击者可利用该漏洞修改主机端的可执行文件。
solution:Upgrade flatpak flatpak to a higher version than 1.0.7,1.1.3,1.2.3,and avoid the version (,1.0.7),[1.1.0,1.1.3],[1.2.0,1.2.3]; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0