CVE catalog
CVE-2024-32462
flatpak affected and fixed versions
A flaw was found in Flatpak, a system for building, distributing, and running sandboxed desktop applications on Linux. Normally, the "--command" argument of "flatpak run" expects being given a command to run in the specified Flatpak app, along with optional arguments. However, it is possible to pass bwrap arguments to "--command=" instead, such as "--bind". It is possible to pass an arbitrary "commandline" to the portal interface "org.freedesktop.portal.Background.RequestBackground" within the Flatpak app. This is normally safe because it can only specify a command that exists inside the sandbox. When a crafted "commandline" is converted into a "--command" and arguments, the app could achieve the same effect of passing arguments directly to bwrap to achieve sandbox escape. flatpak: sandbox escape via RequestBackground portal This vulnerability poses an important security risk due to its potential for sandbox escape within Flatpak environments. Exploiting this vulnerability allows a malicious Flatpak application to execute arbitrary code outside of its designated sandbox, effectively bypassing the security measures intended to restrict its system access. By manipulating the --command argument and the org.freedesktop.portal.Background.RequestBackground portal interface, an attacker can craft commands that are misinterpreted as bwrap options, leading to unauthorized execution of commands with elevated privileges. This could result in unauthorized data access, system compromise, and potentially enable further exploitation of the host system. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
- Severity
- High · CVSS 8.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.51% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "flatpak",
"status": "fixed",
"release": "sid",
"version": "1.18.4-1"
},
{
"name": "flatpak",
"status": "fixed",
"release": "forky",
"version": "1.18.4-1"
},
{
"name": "flatpak",
"status": "fixed",
"release": "trixie",
"version": "1.16.6-1~deb13u2"
},
{
"name": "flatpak",
"status": "fixed",
"release": "trixie-security",
"version": "1.16.6-1~deb13u3"
},
{
"name": "flatpak",
"status": "fixed",
"release": "bookworm",
"version": "1.14.10-1~deb12u2"
},
{
"name": "flatpak",
"status": "fixed",
"release": "bookworm-security",
"version": "1.14.10-1~deb12u2"
}
],
"fixed_versions": [
{
"bug": null,
"name": "flatpak",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "1.14.6-1"
},
{
"bug": null,
"name": "flatpak",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "1.14.6-1"
},
{
"bug": null,
"name": "flatpak",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "1.14.6-1"
},
{
"bug": null,
"name": "flatpak",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "1.14.4-1+deb12u1"
}
],
"distribution_packages": [
{
"name": "flatpak",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "pro",
"versions": [
"1.10.2-3",
"1.12.2-1",
"1.12.2-2",
"1.12.3-1",
"1.12.4-1",
"1.12.5-1",
"1.12.6-1",
"1.12.7-1",
"1.12.7-1ubuntu0.1",
"1.12.7-1ubuntu0.1+esm1"
],
"ecosystem": "deb",
"fixed_version": "",
"provider_record_id": "UBUNTU-CVE-2024-32462"
},
{
"name": "flatpak",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.14.6-1"
}
]
}
],
"release": "24.04",
"versions": [
"1.14.4-2",
"1.14.5-1",
"1.14.5-1build1",
"1.14.5-1build4",
"1.14.5-1build5",
"1.14.5-1build6"
],
"ecosystem": "deb",
"fixed_version": "1.14.6-1",
"provider_record_id": "UBUNTU-CVE-2024-32462"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.14.5-150500.3.9.1"
}
]
}
],
"release": "linux enterprise module for desktop applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.14.5-150500.3.9.1",
"provider_record_id": "SUSE-SU-2024:1536-1"
},
{
"name": "flatpak",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.14.5-150500.3.9.1"
}
]
}
],
"release": "leap 15.5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.14.5-150500.3.9.1",
"provider_record_id": "SUSE-SU-2024:1536-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-150500.3.6.1"
}
]
}
],
"release": "linux enterprise module for desktop applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.16.0-150500.3.6.1",
"provider_record_id": "SUSE-SU-2024:1803-1"
},
{
"name": "xdg-desktop-portal",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-150500.3.6.1"
}
]
}
],
"release": "leap 15.5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.16.0-150500.3.6.1",
"provider_record_id": "SUSE-SU-2024:1803-1"
},
{
"name": "bubblewrap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.0-150500.3.9.1"
}
]
}
],
"release": "linux enterprise module for basesystem 15 sp6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.0-150500.3.9.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-150600.3.6.1"
}
]
}
],
"release": "linux enterprise module for desktop applications 15 sp6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.16.0-150600.3.6.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "bubblewrap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.0-150500.3.9.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.0-150500.3.9.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-150500.3.15.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.16.0-150500.3.15.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "wayland-protocols",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.36-150500.3.3.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.36-150500.3.3.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "bubblewrap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.0-150500.3.9.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.0-150500.3.9.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-150500.3.15.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.16.0-150500.3.15.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "wayland-protocols",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.36-150500.3.3.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.36-150500.3.3.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "bubblewrap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.0-150500.3.9.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.0-150500.3.9.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-150500.3.15.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.16.0-150500.3.15.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "wayland-protocols",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.36-150500.3.3.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.36-150500.3.3.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "bubblewrap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.0-150500.3.9.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.0-150500.3.9.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-150500.3.15.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.16.0-150500.3.15.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "wayland-protocols",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.36-150500.3.3.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.36-150500.3.3.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "bubblewrap",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.0-150500.3.9.1"
}
]
}
],
"release": "leap 15.6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "0.11.0-150500.3.9.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "flatpak",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-150600.3.6.1"
}
]
}
],
"release": "leap 15.6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.16.0-150600.3.6.1",
"provider_record_id": "SUSE-RU-2025:0145-1"
},
{
"name": "flatpak",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.15.8-1.1"
}
]
}
],
"release": "tumbleweed",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.15.8-1.1",
"provider_record_id": "OPENSUSE-SU-2024:13899-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.0-150200.5.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp2-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.8.0-150200.5.6.1",
"provider_record_id": "SUSE-SU-2024:1831-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.0-150200.5.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp3-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.8.0-150200.5.6.1",
"provider_record_id": "SUSE-SU-2024:1831-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.0-150200.5.6.1"
}
]
}
],
"release": "linux enterprise server 15 sp2-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.8.0-150200.5.6.1",
"provider_record_id": "SUSE-SU-2024:1831-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.0-150200.5.6.1"
}
]
}
],
"release": "linux enterprise server 15 sp3-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.8.0-150200.5.6.1",
"provider_record_id": "SUSE-SU-2024:1831-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.0-150200.5.6.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp2",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.8.0-150200.5.6.1",
"provider_record_id": "SUSE-SU-2024:1831-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.0-150200.5.6.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp3",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.8.0-150200.5.6.1",
"provider_record_id": "SUSE-SU-2024:1831-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.0-150200.5.6.1"
}
]
}
],
"release": "enterprise storage 7.1",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.8.0-150200.5.6.1",
"provider_record_id": "SUSE-SU-2024:1831-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.8-150200.4.18.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp2-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.8-150200.4.18.1",
"provider_record_id": "SUSE-SU-2024:1547-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.8-150200.4.18.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp3-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.8-150200.4.18.1",
"provider_record_id": "SUSE-SU-2024:1547-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.8-150200.4.18.1"
}
]
}
],
"release": "linux enterprise server 15 sp2-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.8-150200.4.18.1",
"provider_record_id": "SUSE-SU-2024:1547-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.8-150200.4.18.1"
}
]
}
],
"release": "linux enterprise server 15 sp3-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.8-150200.4.18.1",
"provider_record_id": "SUSE-SU-2024:1547-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.8-150200.4.18.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp2",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.8-150200.4.18.1",
"provider_record_id": "SUSE-SU-2024:1547-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.8-150200.4.18.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp3",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.8-150200.4.18.1",
"provider_record_id": "SUSE-SU-2024:1547-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.8-150200.4.18.1"
}
]
}
],
"release": "enterprise storage 7.1",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.8-150200.4.18.1",
"provider_record_id": "SUSE-SU-2024:1547-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.2-3.6.1"
}
]
}
],
"release": "linux enterprise server 12 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.4.2-3.6.1",
"provider_record_id": "SUSE-SU-2024:1548-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.2-3.6.1"
}
]
}
],
"release": "linux enterprise server for sap applications 12 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.4.2-3.6.1",
"provider_record_id": "SUSE-SU-2024:1548-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.2-150600.4.3.1"
}
]
}
],
"release": "linux enterprise module for desktop applications 15 sp6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.18.2-150600.4.3.1",
"provider_record_id": "SUSE-SU-2024:2067-1"
},
{
"name": "xdg-desktop-portal",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.2-150600.4.3.1"
}
]
}
],
"release": "leap 15.6",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.18.2-150600.4.3.1",
"provider_record_id": "SUSE-SU-2024:2067-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.2-3.3.1"
}
]
}
],
"release": "linux enterprise server 12 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.4.2-3.3.1",
"provider_record_id": "SUSE-SU-2024:1832-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.2-3.3.1"
}
]
}
],
"release": "linux enterprise server for sap applications 12 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.4.2-3.3.1",
"provider_record_id": "SUSE-SU-2024:1832-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.12.8-150400.3.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.12.8-150400.3.6.1",
"provider_record_id": "SUSE-SU-2024:1535-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.12.8-150400.3.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.12.8-150400.3.6.1",
"provider_record_id": "SUSE-SU-2024:1535-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.12.8-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.12.8-150400.3.6.1",
"provider_record_id": "SUSE-SU-2024:1535-1"
},
{
"name": "flatpak",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.12.8-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp4",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.12.8-150400.3.6.1",
"provider_record_id": "SUSE-SU-2024:1535-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.1-150400.3.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.1-150400.3.6.1",
"provider_record_id": "SUSE-SU-2024:1806-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.1-150400.3.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.1-150400.3.6.1",
"provider_record_id": "SUSE-SU-2024:1806-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.1-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.1-150400.3.6.1",
"provider_record_id": "SUSE-SU-2024:1806-1"
},
{
"name": "xdg-desktop-portal",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.10.1-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp4",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.10.1-150400.3.6.1",
"provider_record_id": "SUSE-SU-2024:1806-1"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [flatpak]Unknown
Details (6)
1.14.10-1~deb12u2· amd64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
- [flatpak-tests]Unknown
Source package: [flatpak]
Details (6)
1.14.10-1~deb12u2· amd64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
- [gir1.2-flatpak-1.0]Unknown
Source package: [flatpak]
Details (6)
1.14.10-1~deb12u2· amd64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
- [libflatpak0]Unknown
Source package: [flatpak]
Details (6)
1.14.10-1~deb12u2· amd64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
- [libflatpak-dev]Unknown
Source package: [flatpak]
Details (6)
1.14.10-1~deb12u2· amd64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
- [libflatpak-doc]Unknown
Source package: [flatpak]
Details (6)
1.14.10-1~deb12u2· all · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· all · bookwormFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.16.6-1~deb13u1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· all · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
1.14.10-1~deb12u2· all · bookworm-securityFixed · Fixed:
1.14.4-1+deb12u1dsa · flatpak · debian · bookworm; dsa · flatpak · debian · 12
[Debian 13 (Trixie)]
- [flatpak]Unknown
Details (6)
1.16.6-1~deb13u1· amd64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· arm64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
- [flatpak-tests]Unknown
Source package: [flatpak]
Details (6)
1.16.6-1~deb13u1· amd64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· arm64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
- [gir1.2-flatpak-1.0]Unknown
Source package: [flatpak]
Details (6)
1.16.6-1~deb13u1· amd64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· arm64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
- [libflatpak0]Unknown
Source package: [flatpak]
Details (6)
1.16.6-1~deb13u1· amd64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· arm64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
- [libflatpak-dev]Unknown
Source package: [flatpak]
Details (6)
1.16.6-1~deb13u1· amd64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· arm64 · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
- [libflatpak-doc]Unknown
Source package: [flatpak]
Details (6)
1.16.6-1~deb13u1· all · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· all · trixieFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u1· all · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· all · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u2· all · trixie-security · Historical versionFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
1.16.6-1~deb13u3· all · trixie-securityFixed · Fixed:
1.14.6-1dsa · flatpak · debian · 13
[openSUSE Tumbleweed]
- [flatpak]Unknown
Source package: [flatpak]
Details (1)
1.18.2-1.1· x86_64 · tumbleweedFixed · Fixed:
1.15.8-1.1dsa · flatpak · opensuse · tumbleweed
- [flatpak-devel]Unknown
Source package: [flatpak]
Details (1)
1.18.2-1.1· x86_64 · tumbleweedUnknown · Fixed:
1.15.8-1.1Version impact unknown
dsa · flatpak · opensuse · tumbleweed
- [flatpak-remote-flathub]Unknown
Source package: [flatpak]
Details (1)
1.18.2-1.1· noarch · tumbleweedUnknown · Fixed:
1.15.8-1.1Version impact unknown
dsa · flatpak · opensuse · tumbleweed
- [flatpak-selinux]Unknown
Source package: [flatpak]
Details (1)
1.18.2-1.1· noarch · tumbleweedUnknown · Fixed:
1.15.8-1.1Version impact unknown
dsa · flatpak · opensuse · tumbleweed
- [flatpak-zsh-completion]Unknown
Source package: [flatpak]
Details (1)
1.18.2-1.1· noarch · tumbleweedUnknown · Fixed:
1.15.8-1.1Version impact unknown
dsa · flatpak · opensuse · tumbleweed
- [libflatpak0]Unknown
Source package: [flatpak]
Details (1)
1.18.2-1.1· x86_64 · tumbleweedUnknown · Fixed:
1.15.8-1.1Version impact unknown
dsa · flatpak · opensuse · tumbleweed
- [system-user-flatpak]Unknown
Source package: [flatpak]
Details (1)
1.18.2-1.1· noarch · tumbleweedUnknown · Fixed:
1.15.8-1.1Version impact unknown
dsa · flatpak · opensuse · tumbleweed
- [typelib-1_0-Flatpak-1_0]Unknown
Source package: [flatpak]
Details (1)
1.18.2-1.1· x86_64 · tumbleweedUnknown · Fixed:
1.15.8-1.1Version impact unknown
dsa · flatpak · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_3961.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2024-32462]
- [https://osv.dev/vulnerability/DSA-5666-1]
- [https://osv.dev/vulnerability/SUSE-RU-2025:0145-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1535-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1536-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1547-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1548-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1803-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1806-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1831-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1832-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2067-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2024-32462]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13899-1]
- [https://security-tracker.debian.org/tracker/CVE-2024-32462]
- [https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-32462.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1398.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]