CVE-2021-41133 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-41133 Interim 1 44 2026-03-05T05:14:09Z current 2021-10-10T01:07:32Z 2026-03-05T05:14:09Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-41133 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services into treating the Flatpak app as though it was an ordinary, non-sandboxed host-OS process. They can do this by manipulating the VFS using recent mount-related syscalls that are not blocked by Flatpak's denylist seccomp filter, in order to substitute a crafted `/.flatpak-info` or make that file disappear entirely. Flatpak apps that act as clients for AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can escalate the privileges that the corresponding services will believe the Flatpak app has. Note that protocols that operate entirely over the D-Bus session bus (user bus), system bus or accessibility bus are not affected by this. This is due to the use of a proxy process `xdg-dbus-proxy`, whose VFS cannot be manipulated by the Flatpak app, when interacting with these buses. Patches exist for versions 1.10.4 and 1.12.0, and as of time of publication, a patch for version 1.8.2 is being planned. There are no workarounds aside from upgrading to a patched version. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2021-October/009617.html E-Mail link for SUSE-SU-2021:3472-1 https://lists.suse.com/pipermail/sle-security-updates/2022-September/012249.html E-Mail link for SUSE-SU-2022:3284-1 https://lists.suse.com/pipermail/sle-security-updates/2022-September/012403.html E-Mail link for SUSE-SU-2022:3439-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O63MYUSWLBDBHWT5CBFN7YN5WUMCT6NS/ E-Mail link for openSUSE-SU-2021:1400-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QXL4FA3WICXGFNYWHOG3GKOXZERBN6TL/ E-Mail link for openSUSE-SU-2021:3472-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Liberty Linux 7 SUSE Liberty Linux 7 LTSS SUSE Liberty Linux 8 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed flatpak flatpak-0.10.4-150000.4.13.1 flatpak-1.0.9-12.el7_9 flatpak-1.10.5-4.9.1 flatpak-1.10.5-lp152.3.9.1 flatpak-1.12.1-1.1 flatpak-1.12.5-150400.1.11 flatpak-1.14.4-150500.1.3 flatpak-1.14.6-150600.1.2 flatpak-1.16.0-150600.3.6.1 flatpak-1.16.0-160000.2.2 flatpak-1.2.3-150100.4.8.1 flatpak-1.8.5-4.el8_4 flatpak-builder-1.0.0-12.el7_9 flatpak-devel flatpak-devel-0.10.4-150000.4.13.1 flatpak-devel-1.0.9-12.el7_9 flatpak-devel-1.10.5-4.9.1 flatpak-devel-1.10.5-lp152.3.9.1 flatpak-devel-1.12.1-1.1 flatpak-devel-1.12.5-150400.1.11 flatpak-devel-1.14.4-150500.1.3 flatpak-devel-1.14.6-150600.1.2 flatpak-devel-1.16.0-150600.3.6.1 flatpak-devel-1.16.0-160000.2.2 flatpak-devel-1.2.3-150100.4.8.1 flatpak-libs-1.0.9-12.el7_9 flatpak-libs-1.8.5-4.el8_4 flatpak-remote-flathub-1.14.4-150500.1.3 flatpak-remote-flathub-1.14.6-150600.1.2 flatpak-remote-flathub-1.16.0-150600.3.6.1 flatpak-remote-flathub-1.16.0-160000.2.2 flatpak-selinux-1.16.0-160000.2.2 flatpak-selinux-1.8.5-4.el8_4 flatpak-session-helper-1.8.5-4.el8_4 flatpak-zsh-completion flatpak-zsh-completion-1.10.5-4.9.1 flatpak-zsh-completion-1.10.5-lp152.3.9.1 flatpak-zsh-completion-1.12.1-1.1 flatpak-zsh-completion-1.12.5-150400.1.11 flatpak-zsh-completion-1.14.4-150500.1.3 flatpak-zsh-completion-1.14.6-150600.1.2 flatpak-zsh-completion-1.16.0-150600.3.6.1 flatpak-zsh-completion-1.16.0-160000.2.2 flatpak-zsh-completion-1.2.3-150100.4.8.1 libflatpak0 libflatpak0-0.10.4-150000.4.13.1 libflatpak0-1.10.5-4.9.1 libflatpak0-1.10.5-lp152.3.9.1 libflatpak0-1.12.1-1.1 libflatpak0-1.12.5-150400.1.11 libflatpak0-1.14.4-150500.1.3 libflatpak0-1.14.6-150600.1.2 libflatpak0-1.16.0-150600.3.6.1 libflatpak0-1.16.0-160000.2.2 libflatpak0-1.2.3-150100.4.8.1 system-user-flatpak system-user-flatpak-1.10.5-4.9.1 system-user-flatpak-1.10.5-lp152.3.9.1 system-user-flatpak-1.12.1-1.1 system-user-flatpak-1.12.5-150400.1.11 system-user-flatpak-1.14.4-150500.1.3 system-user-flatpak-1.14.6-150600.1.2 system-user-flatpak-1.16.0-150600.3.6.1 system-user-flatpak-1.16.0-160000.2.2 typelib-1_0-Flatpak-1_0 typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 typelib-1_0-Flatpak-1_0-1.10.5-4.9.1 typelib-1_0-Flatpak-1_0-1.10.5-lp152.3.9.1 typelib-1_0-Flatpak-1_0-1.12.1-1.1 typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 flatpak-1.2.3-150100.4.8.1 as a component of SUSE CaaS Platform 4.0 flatpak-devel-1.2.3-150100.4.8.1 as a component of SUSE CaaS Platform 4.0 flatpak-zsh-completion-1.2.3-150100.4.8.1 as a component of SUSE CaaS Platform 4.0 libflatpak0-1.2.3-150100.4.8.1 as a component of SUSE CaaS Platform 4.0 typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 as a component of SUSE CaaS Platform 4.0 flatpak-1.2.3-150100.4.8.1 as a component of SUSE Enterprise Storage 6 flatpak-devel-1.2.3-150100.4.8.1 as a component of SUSE Enterprise Storage 6 flatpak-zsh-completion-1.2.3-150100.4.8.1 as a component of SUSE Enterprise Storage 6 libflatpak0-1.2.3-150100.4.8.1 as a component of SUSE Enterprise Storage 6 typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 as a component of SUSE Enterprise Storage 6 flatpak-1.0.9-12.el7_9 as a component of SUSE Liberty Linux 7 flatpak-builder-1.0.0-12.el7_9 as a component of SUSE Liberty Linux 7 flatpak-devel-1.0.9-12.el7_9 as a component of SUSE Liberty Linux 7 flatpak-libs-1.0.9-12.el7_9 as a component of SUSE Liberty Linux 7 flatpak-1.0.9-12.el7_9 as a component of SUSE Liberty Linux 7 LTSS flatpak-builder-1.0.0-12.el7_9 as a component of SUSE Liberty Linux 7 LTSS flatpak-devel-1.0.9-12.el7_9 as a component of SUSE Liberty Linux 7 LTSS flatpak-libs-1.0.9-12.el7_9 as a component of SUSE Liberty Linux 7 LTSS flatpak-1.8.5-4.el8_4 as a component of SUSE Liberty Linux 8 flatpak-libs-1.8.5-4.el8_4 as a component of SUSE Liberty Linux 8 flatpak-selinux-1.8.5-4.el8_4 as a component of SUSE Liberty Linux 8 flatpak-session-helper-1.8.5-4.el8_4 as a component of SUSE Liberty Linux 8 flatpak-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak-devel-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak-zsh-completion-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libflatpak0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-devel-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-zsh-completion-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libflatpak0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS flatpak-devel-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libflatpak0-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS flatpak-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS flatpak-devel-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libflatpak0-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS flatpak-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak-devel-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak-zsh-completion-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libflatpak0-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 system-user-flatpak-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 typelib-1_0-Flatpak-1_0-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-devel-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-zsh-completion-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libflatpak0-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 system-user-flatpak-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 typelib-1_0-Flatpak-1_0-1.10.5-4.9.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-devel-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-zsh-completion-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libflatpak0-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 system-user-flatpak-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-devel-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-remote-flathub-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-zsh-completion-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libflatpak0-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 system-user-flatpak-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-devel-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-remote-flathub-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-zsh-completion-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libflatpak0-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 system-user-flatpak-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-devel-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-remote-flathub-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-zsh-completion-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libflatpak0-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 system-user-flatpak-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL flatpak-devel-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL flatpak-zsh-completion-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libflatpak0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL flatpak-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-devel-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-zsh-completion-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libflatpak0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS flatpak-devel-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libflatpak0-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS flatpak-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-devel-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-remote-flathub-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-selinux-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-zsh-completion-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libflatpak0-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 system-user-flatpak-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 flatpak-devel-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libflatpak0-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 flatpak-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-devel-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-zsh-completion-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libflatpak0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-1.10.5-lp152.3.9.1 as a component of openSUSE Leap 15.2 flatpak-devel-1.10.5-lp152.3.9.1 as a component of openSUSE Leap 15.2 flatpak-zsh-completion-1.10.5-lp152.3.9.1 as a component of openSUSE Leap 15.2 libflatpak0-1.10.5-lp152.3.9.1 as a component of openSUSE Leap 15.2 system-user-flatpak-1.10.5-lp152.3.9.1 as a component of openSUSE Leap 15.2 typelib-1_0-Flatpak-1_0-1.10.5-lp152.3.9.1 as a component of openSUSE Leap 15.2 flatpak-1.10.5-4.9.1 as a component of openSUSE Leap 15.3 flatpak-devel-1.10.5-4.9.1 as a component of openSUSE Leap 15.3 flatpak-zsh-completion-1.10.5-4.9.1 as a component of openSUSE Leap 15.3 libflatpak0-1.10.5-4.9.1 as a component of openSUSE Leap 15.3 system-user-flatpak-1.10.5-4.9.1 as a component of openSUSE Leap 15.3 typelib-1_0-Flatpak-1_0-1.10.5-4.9.1 as a component of openSUSE Leap 15.3 flatpak-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 libflatpak0-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 system-user-flatpak-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 flatpak-1.12.1-1.1 as a component of openSUSE Tumbleweed flatpak-devel-1.12.1-1.1 as a component of openSUSE Tumbleweed flatpak-zsh-completion-1.12.1-1.1 as a component of openSUSE Tumbleweed libflatpak0-1.12.1-1.1 as a component of openSUSE Tumbleweed system-user-flatpak-1.12.1-1.1 as a component of openSUSE Tumbleweed typelib-1_0-Flatpak-1_0-1.12.1-1.1 as a component of openSUSE Tumbleweed flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-zsh-completion as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libflatpak0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 system-user-flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services into treating the Flatpak app as though it was an ordinary, non-sandboxed host-OS process. They can do this by manipulating the VFS using recent mount-related syscalls that are not blocked by Flatpak's denylist seccomp filter, in order to substitute a crafted `/.flatpak-info` or make that file disappear entirely. Flatpak apps that act as clients for AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can escalate the privileges that the corresponding services will believe the Flatpak app has. Note that protocols that operate entirely over the D-Bus session bus (user bus), system bus or accessibility bus are not affected by this. This is due to the use of a proxy process `xdg-dbus-proxy`, whose VFS cannot be manipulated by the Flatpak app, when interacting with these buses. Patches exist for versions 1.10.4 and 1.12.0, and as of time of publication, a patch for version 1.8.2 is being planned. There are no workarounds aside from upgrading to a patched version. CVE-2021-41133 SUSE CaaS Platform 4.0:flatpak-1.2.3-150100.4.8.1 SUSE CaaS Platform 4.0:flatpak-devel-1.2.3-150100.4.8.1 SUSE CaaS Platform 4.0:flatpak-zsh-completion-1.2.3-150100.4.8.1 SUSE CaaS Platform 4.0:libflatpak0-1.2.3-150100.4.8.1 SUSE CaaS Platform 4.0:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 SUSE Enterprise Storage 6:flatpak-1.2.3-150100.4.8.1 SUSE Enterprise Storage 6:flatpak-devel-1.2.3-150100.4.8.1 SUSE Enterprise Storage 6:flatpak-zsh-completion-1.2.3-150100.4.8.1 SUSE Enterprise Storage 6:libflatpak0-1.2.3-150100.4.8.1 SUSE Enterprise Storage 6:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 SUSE Liberty Linux 7:flatpak-1.0.9-12.el7_9 SUSE Liberty Linux 7:flatpak-builder-1.0.0-12.el7_9 SUSE Liberty Linux 7:flatpak-devel-1.0.9-12.el7_9 SUSE Liberty Linux 7:flatpak-libs-1.0.9-12.el7_9 SUSE Liberty Linux 7 LTSS:flatpak-1.0.9-12.el7_9 SUSE Liberty Linux 7 LTSS:flatpak-builder-1.0.0-12.el7_9 SUSE Liberty Linux 7 LTSS:flatpak-devel-1.0.9-12.el7_9 SUSE Liberty Linux 7 LTSS:flatpak-libs-1.0.9-12.el7_9 SUSE Liberty Linux 8:flatpak-1.8.5-4.el8_4 SUSE Liberty Linux 8:flatpak-libs-1.8.5-4.el8_4 SUSE Liberty Linux 8:flatpak-selinux-1.8.5-4.el8_4 SUSE Liberty Linux 8:flatpak-session-helper-1.8.5-4.el8_4 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak-devel-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak-zsh-completion-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libflatpak0-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-devel-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-zsh-completion-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libflatpak0-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:flatpak-0.10.4-150000.4.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:flatpak-devel-0.10.4-150000.4.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libflatpak0-0.10.4-150000.4.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:flatpak-0.10.4-150000.4.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:flatpak-devel-0.10.4-150000.4.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libflatpak0-0.10.4-150000.4.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak-devel-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak-zsh-completion-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libflatpak0-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:system-user-flatpak-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:typelib-1_0-Flatpak-1_0-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-devel-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-zsh-completion-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libflatpak0-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:system-user-flatpak-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:typelib-1_0-Flatpak-1_0-1.10.5-4.9.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-devel-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-zsh-completion-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libflatpak0-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:system-user-flatpak-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-devel-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-remote-flathub-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-zsh-completion-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libflatpak0-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:system-user-flatpak-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-devel-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-remote-flathub-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-zsh-completion-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libflatpak0-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:system-user-flatpak-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-devel-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-remote-flathub-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-zsh-completion-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libflatpak0-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:system-user-flatpak-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 SUSE Linux Enterprise Server 15 SP1-BCL:flatpak-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:flatpak-devel-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:flatpak-zsh-completion-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libflatpak0-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-devel-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-zsh-completion-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libflatpak0-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server 15-LTSS:flatpak-0.10.4-150000.4.13.1 SUSE Linux Enterprise Server 15-LTSS:flatpak-devel-0.10.4-150000.4.13.1 SUSE Linux Enterprise Server 15-LTSS:libflatpak0-0.10.4-150000.4.13.1 SUSE Linux Enterprise Server 15-LTSS:typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 SUSE Linux Enterprise Server 16.0:flatpak-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-devel-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-remote-flathub-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-selinux-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-zsh-completion-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:libflatpak0-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:system-user-flatpak-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 15:flatpak-0.10.4-150000.4.13.1 SUSE Linux Enterprise Server for SAP Applications 15:flatpak-devel-0.10.4-150000.4.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libflatpak0-0.10.4-150000.4.13.1 SUSE Linux Enterprise Server for SAP Applications 15:typelib-1_0-Flatpak-1_0-0.10.4-150000.4.13.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-devel-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-zsh-completion-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libflatpak0-1.2.3-150100.4.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 openSUSE Leap 15.2:flatpak-1.10.5-lp152.3.9.1 openSUSE Leap 15.2:flatpak-devel-1.10.5-lp152.3.9.1 openSUSE Leap 15.2:flatpak-zsh-completion-1.10.5-lp152.3.9.1 openSUSE Leap 15.2:libflatpak0-1.10.5-lp152.3.9.1 openSUSE Leap 15.2:system-user-flatpak-1.10.5-lp152.3.9.1 openSUSE Leap 15.2:typelib-1_0-Flatpak-1_0-1.10.5-lp152.3.9.1 openSUSE Leap 15.3:flatpak-1.10.5-4.9.1 openSUSE Leap 15.3:flatpak-devel-1.10.5-4.9.1 openSUSE Leap 15.3:flatpak-zsh-completion-1.10.5-4.9.1 openSUSE Leap 15.3:libflatpak0-1.10.5-4.9.1 openSUSE Leap 15.3:system-user-flatpak-1.10.5-4.9.1 openSUSE Leap 15.3:typelib-1_0-Flatpak-1_0-1.10.5-4.9.1 openSUSE Leap 15.4:flatpak-1.12.5-150400.1.11 openSUSE Leap 15.4:libflatpak0-1.12.5-150400.1.11 openSUSE Leap 15.4:system-user-flatpak-1.12.5-150400.1.11 openSUSE Tumbleweed:flatpak-1.12.1-1.1 openSUSE Tumbleweed:flatpak-devel-1.12.1-1.1 openSUSE Tumbleweed:flatpak-zsh-completion-1.12.1-1.1 openSUSE Tumbleweed:libflatpak0-1.12.1-1.1 openSUSE Tumbleweed:system-user-flatpak-1.12.1-1.1 openSUSE Tumbleweed:typelib-1_0-Flatpak-1_0-1.12.1-1.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-zsh-completion SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libflatpak0 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:system-user-flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP4:typelib-1_0-Flatpak-1_0 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H