CVE-2019-10063 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-10063 Interim 1 63 2026-03-05T06:20:44Z current 2021-05-30T14:26:31Z 2026-03-05T06:20:44Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-10063 Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE CaaS Platform 4.5 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Liberty Linux 7 SUSE Liberty Linux 8 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed flatpak flatpak-1.0.2-5.el7_6 flatpak-1.0.6-3.el8_0 flatpak-1.10.2-4.6.1 flatpak-1.11.3-1.2 flatpak-1.12.5-150400.1.11 flatpak-1.14.4-150500.1.3 flatpak-1.14.6-150600.1.2 flatpak-1.16.0-150600.3.6.1 flatpak-1.16.0-160000.2.2 flatpak-1.2.3-2.12 flatpak-1.4.2-1.31 flatpak-1.6.3-2.7 flatpak-1.6.3-lp152.2.1 flatpak-builder-1.0.0-5.el7_6 flatpak-devel flatpak-devel-1.0.2-5.el7_6 flatpak-devel-1.10.2-4.6.1 flatpak-devel-1.11.3-1.2 flatpak-devel-1.12.5-150400.1.11 flatpak-devel-1.14.4-150500.1.3 flatpak-devel-1.14.6-150600.1.2 flatpak-devel-1.16.0-150600.3.6.1 flatpak-devel-1.16.0-160000.2.2 flatpak-devel-1.2.3-2.12 flatpak-devel-1.6.3-2.7 flatpak-libs-1.0.2-5.el7_6 flatpak-libs-1.0.6-3.el8_0 flatpak-remote-flathub-1.14.4-150500.1.3 flatpak-remote-flathub-1.14.6-150600.1.2 flatpak-remote-flathub-1.16.0-150600.3.6.1 flatpak-remote-flathub-1.16.0-160000.2.2 flatpak-selinux-1.16.0-160000.2.2 flatpak-zsh-completion flatpak-zsh-completion-1.10.2-4.6.1 flatpak-zsh-completion-1.11.3-1.2 flatpak-zsh-completion-1.12.5-150400.1.11 flatpak-zsh-completion-1.14.4-150500.1.3 flatpak-zsh-completion-1.14.6-150600.1.2 flatpak-zsh-completion-1.16.0-150600.3.6.1 flatpak-zsh-completion-1.16.0-160000.2.2 flatpak-zsh-completion-1.2.3-2.12 flatpak-zsh-completion-1.6.3-2.7 libflatpak0 libflatpak0-1.10.2-4.6.1 libflatpak0-1.11.3-1.2 libflatpak0-1.12.5-150400.1.11 libflatpak0-1.14.4-150500.1.3 libflatpak0-1.14.6-150600.1.2 libflatpak0-1.16.0-150600.3.6.1 libflatpak0-1.16.0-160000.2.2 libflatpak0-1.2.3-2.12 libflatpak0-1.4.2-1.31 libflatpak0-1.6.3-2.7 libflatpak0-1.6.3-lp152.2.1 system-user-flatpak system-user-flatpak-1.10.2-4.6.1 system-user-flatpak-1.11.3-1.2 system-user-flatpak-1.12.5-150400.1.11 system-user-flatpak-1.14.4-150500.1.3 system-user-flatpak-1.14.6-150600.1.2 system-user-flatpak-1.16.0-150600.3.6.1 system-user-flatpak-1.16.0-160000.2.2 system-user-flatpak-1.6.3-2.7 system-user-flatpak-1.6.3-lp152.2.1 typelib-1_0-Flatpak-1_0 typelib-1_0-Flatpak-1_0-1.10.2-4.6.1 typelib-1_0-Flatpak-1_0-1.11.3-1.2 typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 typelib-1_0-Flatpak-1_0-1.2.3-2.12 typelib-1_0-Flatpak-1_0-1.4.2-1.31 typelib-1_0-Flatpak-1_0-1.6.3-2.7 typelib-1_0-Flatpak-1_0-1.6.3-lp152.2.1 flatpak-1.0.2-5.el7_6 as a component of SUSE Liberty Linux 7 flatpak-builder-1.0.0-5.el7_6 as a component of SUSE Liberty Linux 7 flatpak-devel-1.0.2-5.el7_6 as a component of SUSE Liberty Linux 7 flatpak-libs-1.0.2-5.el7_6 as a component of SUSE Liberty Linux 7 flatpak-1.0.6-3.el8_0 as a component of SUSE Liberty Linux 8 flatpak-libs-1.0.6-3.el8_0 as a component of SUSE Liberty Linux 8 flatpak-1.4.2-1.31 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libflatpak0-1.4.2-1.31 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 typelib-1_0-Flatpak-1_0-1.4.2-1.31 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 flatpak-1.2.3-2.12 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 flatpak-devel-1.2.3-2.12 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 flatpak-zsh-completion-1.2.3-2.12 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libflatpak0-1.2.3-2.12 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 typelib-1_0-Flatpak-1_0-1.2.3-2.12 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 flatpak-1.6.3-2.7 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak-devel-1.6.3-2.7 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak-zsh-completion-1.6.3-2.7 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libflatpak0-1.6.3-2.7 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 system-user-flatpak-1.6.3-2.7 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 typelib-1_0-Flatpak-1_0-1.6.3-2.7 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak-1.10.2-4.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-devel-1.10.2-4.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-zsh-completion-1.10.2-4.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libflatpak0-1.10.2-4.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 system-user-flatpak-1.10.2-4.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 typelib-1_0-Flatpak-1_0-1.10.2-4.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-devel-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-zsh-completion-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libflatpak0-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 system-user-flatpak-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-devel-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-remote-flathub-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-zsh-completion-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libflatpak0-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 system-user-flatpak-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-devel-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-remote-flathub-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-zsh-completion-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libflatpak0-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 system-user-flatpak-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-devel-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-remote-flathub-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-zsh-completion-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libflatpak0-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 system-user-flatpak-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-1.4.2-1.31 as a component of SUSE Linux Enterprise Server 12 SP5 libflatpak0-1.4.2-1.31 as a component of SUSE Linux Enterprise Server 12 SP5 typelib-1_0-Flatpak-1_0-1.4.2-1.31 as a component of SUSE Linux Enterprise Server 12 SP5 flatpak-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-devel-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-remote-flathub-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-selinux-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-zsh-completion-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libflatpak0-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 system-user-flatpak-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-1.4.2-1.31 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libflatpak0-1.4.2-1.31 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 typelib-1_0-Flatpak-1_0-1.4.2-1.31 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 flatpak-1.6.3-lp152.2.1 as a component of openSUSE Leap 15.2 libflatpak0-1.6.3-lp152.2.1 as a component of openSUSE Leap 15.2 system-user-flatpak-1.6.3-lp152.2.1 as a component of openSUSE Leap 15.2 typelib-1_0-Flatpak-1_0-1.6.3-lp152.2.1 as a component of openSUSE Leap 15.2 flatpak-1.10.2-4.6.1 as a component of openSUSE Leap 15.3 libflatpak0-1.10.2-4.6.1 as a component of openSUSE Leap 15.3 system-user-flatpak-1.10.2-4.6.1 as a component of openSUSE Leap 15.3 flatpak-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 libflatpak0-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 system-user-flatpak-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 flatpak-1.11.3-1.2 as a component of openSUSE Tumbleweed flatpak-devel-1.11.3-1.2 as a component of openSUSE Tumbleweed flatpak-zsh-completion-1.11.3-1.2 as a component of openSUSE Tumbleweed libflatpak0-1.11.3-1.2 as a component of openSUSE Tumbleweed system-user-flatpak-1.11.3-1.2 as a component of openSUSE Tumbleweed typelib-1_0-Flatpak-1_0-1.11.3-1.2 as a component of openSUSE Tumbleweed flatpak as a component of SUSE CaaS Platform 4.0 flatpak-devel as a component of SUSE CaaS Platform 4.0 flatpak-zsh-completion as a component of SUSE CaaS Platform 4.0 libflatpak0 as a component of SUSE CaaS Platform 4.0 typelib-1_0-Flatpak-1_0 as a component of SUSE CaaS Platform 4.0 flatpak as a component of SUSE CaaS Platform 4.5 flatpak as a component of SUSE Enterprise Storage 6 flatpak as a component of SUSE Enterprise Storage 7 flatpak as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 flatpak as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libflatpak0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libflatpak0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS flatpak-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS flatpak-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libflatpak0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS system-user-flatpak as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS flatpak as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libflatpak0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS system-user-flatpak as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak-zsh-completion as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libflatpak0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 system-user-flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-zsh-completion as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libflatpak0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 system-user-flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-zsh-completion as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libflatpak0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 system-user-flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak as a component of SUSE Linux Enterprise Real Time 15 SP2 flatpak-devel as a component of SUSE Linux Enterprise Real Time 15 SP2 flatpak-zsh-completion as a component of SUSE Linux Enterprise Real Time 15 SP2 libflatpak0 as a component of SUSE Linux Enterprise Real Time 15 SP2 system-user-flatpak as a component of SUSE Linux Enterprise Real Time 15 SP2 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Real Time 15 SP2 flatpak as a component of SUSE Linux Enterprise Server 12 SP5 libflatpak0 as a component of SUSE Linux Enterprise Server 12 SP5 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server 12 SP5 flatpak as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libflatpak0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libflatpak0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS system-user-flatpak as a component of SUSE Linux Enterprise Server 15 SP2-LTSS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 flatpak as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 flatpak as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 flatpak as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libflatpak0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libflatpak0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 system-user-flatpak as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak as a component of SUSE Manager Proxy 4.0 flatpak as a component of SUSE Manager Proxy 4.1 flatpak as a component of SUSE Manager Retail Branch Server 4.0 flatpak as a component of SUSE Manager Retail Branch Server 4.1 flatpak as a component of SUSE Manager Server 4.0 flatpak as a component of SUSE Manager Server 4.1 Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI. CVE-2019-10063 SUSE Liberty Linux 7:flatpak-1.0.2-5.el7_6 SUSE Liberty Linux 7:flatpak-builder-1.0.0-5.el7_6 SUSE Liberty Linux 7:flatpak-devel-1.0.2-5.el7_6 SUSE Liberty Linux 7:flatpak-libs-1.0.2-5.el7_6 SUSE Liberty Linux 8:flatpak-1.0.6-3.el8_0 SUSE Liberty Linux 8:flatpak-libs-1.0.6-3.el8_0 SUSE Linux Enterprise High Performance Computing 12 SP5:flatpak-1.4.2-1.31 SUSE Linux Enterprise High Performance Computing 12 SP5:libflatpak0-1.4.2-1.31 SUSE Linux Enterprise High Performance Computing 12 SP5:typelib-1_0-Flatpak-1_0-1.4.2-1.31 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:flatpak-1.2.3-2.12 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:flatpak-devel-1.2.3-2.12 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:flatpak-zsh-completion-1.2.3-2.12 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libflatpak0-1.2.3-2.12 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:typelib-1_0-Flatpak-1_0-1.2.3-2.12 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak-1.6.3-2.7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak-devel-1.6.3-2.7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak-zsh-completion-1.6.3-2.7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libflatpak0-1.6.3-2.7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:system-user-flatpak-1.6.3-2.7 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:typelib-1_0-Flatpak-1_0-1.6.3-2.7 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-1.10.2-4.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-devel-1.10.2-4.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-zsh-completion-1.10.2-4.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libflatpak0-1.10.2-4.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:system-user-flatpak-1.10.2-4.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:typelib-1_0-Flatpak-1_0-1.10.2-4.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-devel-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-zsh-completion-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libflatpak0-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:system-user-flatpak-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-devel-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-remote-flathub-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-zsh-completion-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libflatpak0-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:system-user-flatpak-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-devel-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-remote-flathub-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-zsh-completion-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libflatpak0-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:system-user-flatpak-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-devel-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-remote-flathub-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-zsh-completion-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libflatpak0-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:system-user-flatpak-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 SUSE Linux Enterprise Server 12 SP5:flatpak-1.4.2-1.31 SUSE Linux Enterprise Server 12 SP5:libflatpak0-1.4.2-1.31 SUSE Linux Enterprise Server 12 SP5:typelib-1_0-Flatpak-1_0-1.4.2-1.31 SUSE Linux Enterprise Server 16.0:flatpak-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-devel-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-remote-flathub-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-selinux-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-zsh-completion-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:libflatpak0-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:system-user-flatpak-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:flatpak-1.4.2-1.31 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libflatpak0-1.4.2-1.31 SUSE Linux Enterprise Server for SAP Applications 12 SP5:typelib-1_0-Flatpak-1_0-1.4.2-1.31 openSUSE Leap 15.2:flatpak-1.6.3-lp152.2.1 openSUSE Leap 15.2:libflatpak0-1.6.3-lp152.2.1 openSUSE Leap 15.2:system-user-flatpak-1.6.3-lp152.2.1 openSUSE Leap 15.2:typelib-1_0-Flatpak-1_0-1.6.3-lp152.2.1 openSUSE Leap 15.3:flatpak-1.10.2-4.6.1 openSUSE Leap 15.3:libflatpak0-1.10.2-4.6.1 openSUSE Leap 15.3:system-user-flatpak-1.10.2-4.6.1 openSUSE Leap 15.4:flatpak-1.12.5-150400.1.11 openSUSE Leap 15.4:libflatpak0-1.12.5-150400.1.11 openSUSE Leap 15.4:system-user-flatpak-1.12.5-150400.1.11 openSUSE Tumbleweed:flatpak-1.11.3-1.2 openSUSE Tumbleweed:flatpak-devel-1.11.3-1.2 openSUSE Tumbleweed:flatpak-zsh-completion-1.11.3-1.2 openSUSE Tumbleweed:libflatpak0-1.11.3-1.2 openSUSE Tumbleweed:system-user-flatpak-1.11.3-1.2 openSUSE Tumbleweed:typelib-1_0-Flatpak-1_0-1.11.3-1.2 SUSE CaaS Platform 4.0:flatpak SUSE CaaS Platform 4.0:flatpak-devel SUSE CaaS Platform 4.0:flatpak-zsh-completion SUSE CaaS Platform 4.0:libflatpak0 SUSE CaaS Platform 4.0:typelib-1_0-Flatpak-1_0 SUSE CaaS Platform 4.5:flatpak SUSE Enterprise Storage 6:flatpak SUSE Enterprise Storage 7:flatpak SUSE Linux Enterprise High Performance Computing 12 SP5:flatpak SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libflatpak0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libflatpak0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:flatpak SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:flatpak-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:flatpak-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libflatpak0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:system-user-flatpak SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libflatpak0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:system-user-flatpak SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP2:flatpak-zsh-completion SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libflatpak0 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:system-user-flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP2:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-zsh-completion SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libflatpak0 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:system-user-flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP3:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-zsh-completion SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libflatpak0 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:system-user-flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP4:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Real Time 15 SP2:flatpak SUSE Linux Enterprise Real Time 15 SP2:flatpak-devel SUSE Linux Enterprise Real Time 15 SP2:flatpak-zsh-completion SUSE Linux Enterprise Real Time 15 SP2:libflatpak0 SUSE Linux Enterprise Real Time 15 SP2:system-user-flatpak SUSE Linux Enterprise Real Time 15 SP2:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server 12 SP5:flatpak SUSE Linux Enterprise Server 12 SP5:libflatpak0 SUSE Linux Enterprise Server 12 SP5:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-devel SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-zsh-completion SUSE Linux Enterprise Server 15 SP1-LTSS:libflatpak0 SUSE Linux Enterprise Server 15 SP1-LTSS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak-devel SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak-zsh-completion SUSE Linux Enterprise Server 15 SP2-LTSS:libflatpak0 SUSE Linux Enterprise Server 15 SP2-LTSS:system-user-flatpak SUSE Linux Enterprise Server 15 SP2-LTSS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:flatpak SUSE Linux Enterprise Server Business Critical Linux 15 SP2:flatpak SUSE Linux Enterprise Server for SAP Applications 12 SP5:flatpak SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP1:libflatpak0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP2:libflatpak0 SUSE Linux Enterprise Server for SAP Applications 15 SP2:system-user-flatpak SUSE Linux Enterprise Server for SAP Applications 15 SP2:typelib-1_0-Flatpak-1_0 SUSE Manager Proxy 4.0:flatpak SUSE Manager Proxy 4.1:flatpak SUSE Manager Retail Branch Server 4.0:flatpak SUSE Manager Retail Branch Server 4.1:flatpak SUSE Manager Server 4.0:flatpak SUSE Manager Server 4.1:flatpak important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H