{"id":107382,"date":"2023-03-22T12:48:15","date_gmt":"2023-03-22T10:48:15","guid":{"rendered":"https:\/\/prohoster.info\/?p=107382"},"modified":"2023-03-22T16:30:23","modified_gmt":"2023-03-22T14:30:23","slug":"obnovlenie-flatpak-s-ustraneniem-dvuh-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/obnovlenie-flatpak-s-ustraneniem-dvuh-uyazvimostej","title":{"rendered":"Flatpak update addressing two vulnerabilities","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Corrective updates are available for the Flatpak 1.14.4, 1.12.8, 1.10.8, and 1.15.4 packaging tools, which address two vulnerabilities: <\/p>\n
\n
CVE-2023-28100 \u2014 the ability to copy and paste text into the input buffer of the virtual console through manipulations with ioctl TIOCLINUX when installing a crafted flatpak package by an attacker. For instance, this vulnerability can be exploited to run arbitrary commands in the console after the external package installation process is completed. The issue occurs only in the classic virtual console (\/dev\/tty1, \/dev\/tty2, etc.) and does not affect sessions in xterm, gnome-terminal, Konsole, and other graphical terminals. This vulnerability is not specific to flatpak and can be used to attack other applications, similar vulnerabilities that allowed character substitution via the ioctl interface TIOCSTI have been found in \/bin\/sandbox and snap.\n
CVE-2023-28101 \u2014 the possibility of using escape sequences in the permissions list in the package metadata to obscure information displayed in the terminal about requested extended permissions during package installation or upgrade through the command-line interface. Attackers can exploit this vulnerability to mislead users about the permissions utilized in the package. Graphical interfaces for installing Flatpak packages, such as GNOME Software and KDE Plasma Discover, are not affected by this issue. <\/ul>\n