CVE:CVE-2018-6560
CNNVD:CNNVD-201802-053
Flatpak是一个用于构建和安装Linux桌面应用程序的系统。
Flatpak 0.8.9之前的版本、0.9.x版本和0.10.3之前的0.10.x版本中的bus-proxy/flatpak-proxy.c文件存在安全漏洞。攻击者可借助特制的D-Bus消息利用该漏洞绕过沙盒。
solution:Upgrade flatpak flatpak to a higher version than 0.8.9,0.9.99,0.10.3,and avoid the version (,0.8.9),[0.9.1,0.9.99],[0.10.0,0.10.3); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.6,and avoid the version 7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0