VDB
GCVE-110-MAGEIA-2018-143
GCVE-110-MAGEIA-2018-143
Advisory Published
Updated flatpak packages fix security vulnerability:
A sandbox escape in the flatpak dbus proxy in the authentication phase
(CVE-2018-6560).
The flatpak has been upgraded to the latest stable version, 0.10.3, which fixes
this issue. The bubblewrap, ostree, flatpak-builder, xdg-desktop-portal,
xdg-desktop-portal-gtk, and appstream-glib packages have also been upgraded to
support this updated.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | ostree | 0 (affected), 2018.1-1.mga6 (unaffected), 2018.1-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | appstream-glib | 0 (affected), 0.7.6-1.mga6 (unaffected), 0 (affected), 0.7.6-1.mga6 (unaffected) | — |
| Mageia | xdg-desktop-portal | 0 (affected), 0.9-1.mga6 (unaffected), 0 (affected), 0.9-1.mga6 (unaffected) | — |
| Mageia | bubblewrap | 0 (affected), 0.2.0-1.mga6 (unaffected), 0 (affected), 0.2.0-1.mga6 (unaffected) | — |
| Mageia | flatpak | 0 (affected), 0.10.3-1.mga6 (unaffected), 0 (affected), 0.10.3-1.mga6 (unaffected) | — |
| Mageia | drakx-installer-stage2 | 0 (affected), 17.88.3-1.mga6 (unaffected) | — |
| Mageia | flatpak-builder | 0 (affected), 0.10.6-1.mga6 (unaffected), 0 (affected), 0.10.6-1.mga6 (unaffected) | — |
| Mageia | drakxtools | 0 (affected), 17.88.3-1.mga6 (unaffected) | — |
| Mageia | xdg-desktop-portal-gtk | 0 (affected), 0.9-1.mga6 (unaffected), 0 (affected), 0.9-1.mga6 (unaffected) | — |
References
Browse GCVE Records
72,409 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.