VDB
GCVE-110-MAGEIA-2022-131
GCVE-110-MAGEIA-2022-131
Advisory Published
Flatpak doesn't properly validate that the permissions displayed to the
user for an app at install time match the actual permissions granted to
the app at runtime, in the case that there's a null byte in the metadata
file of an app. (CVE-2021-43860)
Path traversal vulnerability (CVE-2022-21682)
Various other fixes and enhancements included in update to version 1.12.7.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | solaar | 0 (affected), 1.1.5-1.mga8 (unaffected) | — |
| Mageia | discover | 0 (affected), 5.20.4-3.3.mga8 (unaffected), 5.20.4-3.3.mga8 (unaffected), 0 (affected) | — |
| Mageia | xdg-desktop-portal-kde | 0 (affected), 5.20.4-2.1.mga8 (unaffected), 0 (affected), 5.20.4-2.1.mga8 (unaffected) | — |
| Mageia | gnome-software | 0 (affected), 3.38.0-2.1.mga8 (unaffected), 0 (affected), 3.38.0-2.1.mga8 (unaffected) | — |
| Mageia | flatpak | 1.12.7-1.mga8 (unaffected), 0 (affected), 0 (affected), 1.12.7-1.mga8 (unaffected) | — |
Aliases
References
Browse GCVE Records
74,299 records in the GCVE database · Updated July 22, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.