CVE:CVE-2017-9780
CNNVD:CNNVD-201706-941
Flatpak是一个用于构建和安装Linux桌面应用程序的系统。
Flatpak 0.8.7之前的版本中存在安全漏洞。本地攻击者可利用该漏洞运行setuid可执行文件。
solution:Upgrade flatpak flatpak to a higher version than 0.8.6,and avoid the version (,0.8.6]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0