TEMP-1147701-003AAD

NameTEMP-1147701-003AAD
DescriptionGHSA-484h-v688-jq5j: Source URL scheme bypasses sandboxed mode protections across multiple source subtypes
SourceAutomatically generated temporary name. Not for external reference.
Debian Bugs1147701

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
flatpak-builder (PTS)bookworm1.2.3-1vulnerable
trixie1.4.4-2vulnerable
forky1.4.10-1vulnerable
sid1.4.11-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
flatpak-buildersource(unstable)1.4.11-11147701

Notes

[trixie] - flatpak-builder <no-dsa> (Minor issue)
[bookworm] - flatpak-builder <postponed> (Minor issue)
https://github.com/flatpak/flatpak-builder/security/advisories/GHSA-484h-v688-jq5j

Search for package or bug name: Reporting problems