CVE-2022-21682 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-21682 Interim 1 37 2026-03-05T04:49:01Z current 2022-01-15T02:02:34Z 2026-03-05T04:49:01Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-21682 Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point the build directory will have the full access that is specified in the manifest, so running `flatpak build` against it will gain those permissions. Normally this will not be done, so this is not problem. However, if `--mirror-screenshots-url` is specified, then flatpak-builder will launch `flatpak build --nofilesystem=host appstream-utils mirror-screenshots` after finalization, which can lead to issues even with the `--nofilesystem=host` protection. In normal use, the only issue is that these empty directories can be created wherever the user has write permissions. However, a malicious application could replace the `appstream-util` binary and potentially do something more hostile. This has been resolved in Flatpak 1.12.3 and 1.10.6 by changing the behaviour of `--nofilesystem=home` and `--nofilesystem=host`. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2022-March/010349.html E-Mail link for SUSE-SU-2022:0712-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T4OG73MX3JPZBHYMUXUULPTVL7ZOOTZ5/ E-Mail link for openSUSE-SU-2022:0712-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Liberty Linux 8 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-BCL SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed flatpak flatpak-1.10.7-4.12.1 flatpak-1.12.4-1.1 flatpak-1.12.5-150400.1.11 flatpak-1.14.4-150500.1.3 flatpak-1.14.6-150600.1.2 flatpak-1.16.0-150600.3.6.1 flatpak-1.16.0-160000.2.2 flatpak-builder flatpak-builder-1.0.14-2.el8 flatpak-builder-1.2.2-1.1 flatpak-builder-1.2.2-150400.1.9 flatpak-builder-1.2.3-150600.1.6 flatpak-devel flatpak-devel-1.10.7-4.12.1 flatpak-devel-1.12.4-1.1 flatpak-devel-1.12.5-150400.1.11 flatpak-devel-1.14.4-150500.1.3 flatpak-devel-1.14.6-150600.1.2 flatpak-devel-1.16.0-150600.3.6.1 flatpak-devel-1.16.0-160000.2.2 flatpak-remote-flathub-1.14.4-150500.1.3 flatpak-remote-flathub-1.14.6-150600.1.2 flatpak-remote-flathub-1.16.0-150600.3.6.1 flatpak-remote-flathub-1.16.0-160000.2.2 flatpak-selinux-1.16.0-160000.2.2 flatpak-zsh-completion flatpak-zsh-completion-1.10.7-4.12.1 flatpak-zsh-completion-1.12.4-1.1 flatpak-zsh-completion-1.12.5-150400.1.11 flatpak-zsh-completion-1.14.4-150500.1.3 flatpak-zsh-completion-1.14.6-150600.1.2 flatpak-zsh-completion-1.16.0-150600.3.6.1 flatpak-zsh-completion-1.16.0-160000.2.2 libflatpak0 libflatpak0-1.10.7-4.12.1 libflatpak0-1.12.4-1.1 libflatpak0-1.12.5-150400.1.11 libflatpak0-1.14.4-150500.1.3 libflatpak0-1.14.6-150600.1.2 libflatpak0-1.16.0-150600.3.6.1 libflatpak0-1.16.0-160000.2.2 system-user-flatpak system-user-flatpak-1.10.7-4.12.1 system-user-flatpak-1.12.4-1.1 system-user-flatpak-1.12.5-150400.1.11 system-user-flatpak-1.14.4-150500.1.3 system-user-flatpak-1.14.6-150600.1.2 system-user-flatpak-1.16.0-150600.3.6.1 system-user-flatpak-1.16.0-160000.2.2 typelib-1_0-Flatpak-1_0 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 typelib-1_0-Flatpak-1_0-1.12.4-1.1 typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 flatpak-1.10.7-4.12.1 as a component of SUSE Enterprise Storage 7 flatpak-devel-1.10.7-4.12.1 as a component of SUSE Enterprise Storage 7 flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Enterprise Storage 7 libflatpak0-1.10.7-4.12.1 as a component of SUSE Enterprise Storage 7 system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Enterprise Storage 7 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Enterprise Storage 7 flatpak-builder-1.0.14-2.el8 as a component of SUSE Liberty Linux 8 flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS flatpak-devel-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libflatpak0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak-devel-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libflatpak0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-devel-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libflatpak0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 flatpak-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-devel-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-zsh-completion-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libflatpak0-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 system-user-flatpak-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-devel-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-remote-flathub-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-zsh-completion-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libflatpak0-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 system-user-flatpak-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-devel-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-remote-flathub-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-zsh-completion-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libflatpak0-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 system-user-flatpak-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-devel-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-remote-flathub-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-zsh-completion-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libflatpak0-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 system-user-flatpak-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-builder-1.2.2-150400.1.9 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 flatpak-builder-1.2.2-150400.1.9 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 flatpak-builder-1.2.3-150600.1.6 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 flatpak-builder-1.2.3-150600.1.6 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 flatpak-devel-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 libflatpak0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL flatpak-devel-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL libflatpak0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak-devel-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libflatpak0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-devel-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-remote-flathub-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-selinux-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-zsh-completion-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libflatpak0-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 system-user-flatpak-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak-devel-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libflatpak0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak-1.10.7-4.12.1 as a component of SUSE Manager Proxy 4.1 flatpak-devel-1.10.7-4.12.1 as a component of SUSE Manager Proxy 4.1 flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Manager Proxy 4.1 libflatpak0-1.10.7-4.12.1 as a component of SUSE Manager Proxy 4.1 system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Manager Proxy 4.1 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Manager Proxy 4.1 flatpak-1.10.7-4.12.1 as a component of SUSE Manager Retail Branch Server 4.1 flatpak-devel-1.10.7-4.12.1 as a component of SUSE Manager Retail Branch Server 4.1 flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Manager Retail Branch Server 4.1 libflatpak0-1.10.7-4.12.1 as a component of SUSE Manager Retail Branch Server 4.1 system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Manager Retail Branch Server 4.1 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Manager Retail Branch Server 4.1 flatpak-1.10.7-4.12.1 as a component of SUSE Manager Server 4.1 flatpak-devel-1.10.7-4.12.1 as a component of SUSE Manager Server 4.1 flatpak-zsh-completion-1.10.7-4.12.1 as a component of SUSE Manager Server 4.1 libflatpak0-1.10.7-4.12.1 as a component of SUSE Manager Server 4.1 system-user-flatpak-1.10.7-4.12.1 as a component of SUSE Manager Server 4.1 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of SUSE Manager Server 4.1 flatpak-1.10.7-4.12.1 as a component of openSUSE Leap 15.3 flatpak-devel-1.10.7-4.12.1 as a component of openSUSE Leap 15.3 flatpak-zsh-completion-1.10.7-4.12.1 as a component of openSUSE Leap 15.3 libflatpak0-1.10.7-4.12.1 as a component of openSUSE Leap 15.3 system-user-flatpak-1.10.7-4.12.1 as a component of openSUSE Leap 15.3 typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 as a component of openSUSE Leap 15.3 flatpak-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 libflatpak0-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 system-user-flatpak-1.12.5-150400.1.11 as a component of openSUSE Leap 15.4 flatpak-1.12.4-1.1 as a component of openSUSE Tumbleweed flatpak-builder-1.2.2-1.1 as a component of openSUSE Tumbleweed flatpak-devel-1.12.4-1.1 as a component of openSUSE Tumbleweed flatpak-zsh-completion-1.12.4-1.1 as a component of openSUSE Tumbleweed libflatpak0-1.12.4-1.1 as a component of openSUSE Tumbleweed system-user-flatpak-1.12.4-1.1 as a component of openSUSE Tumbleweed typelib-1_0-Flatpak-1_0-1.12.4-1.1 as a component of openSUSE Tumbleweed flatpak as a component of SUSE CaaS Platform 4.0 flatpak-devel as a component of SUSE CaaS Platform 4.0 flatpak-zsh-completion as a component of SUSE CaaS Platform 4.0 libflatpak0 as a component of SUSE CaaS Platform 4.0 typelib-1_0-Flatpak-1_0 as a component of SUSE CaaS Platform 4.0 flatpak as a component of SUSE Enterprise Storage 6 flatpak as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libflatpak0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS flatpak as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libflatpak0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS flatpak-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libflatpak0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-zsh-completion as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libflatpak0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 system-user-flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-builder as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 flatpak as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libflatpak0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak as a component of SUSE Linux Enterprise Server 15-ESPOS flatpak as a component of SUSE Linux Enterprise Server 15-LTSS flatpak-devel as a component of SUSE Linux Enterprise Server 15-LTSS libflatpak0 as a component of SUSE Linux Enterprise Server 15-LTSS typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server 15-LTSS flatpak as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 flatpak as a component of SUSE Linux Enterprise Server for SAP Applications 15 flatpak-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libflatpak0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 flatpak as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libflatpak0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point the build directory will have the full access that is specified in the manifest, so running `flatpak build` against it will gain those permissions. Normally this will not be done, so this is not problem. However, if `--mirror-screenshots-url` is specified, then flatpak-builder will launch `flatpak build --nofilesystem=host appstream-utils mirror-screenshots` after finalization, which can lead to issues even with the `--nofilesystem=host` protection. In normal use, the only issue is that these empty directories can be created wherever the user has write permissions. However, a malicious application could replace the `appstream-util` binary and potentially do something more hostile. This has been resolved in Flatpak 1.12.3 and 1.10.6 by changing the behaviour of `--nofilesystem=home` and `--nofilesystem=host`. CVE-2022-21682 SUSE Enterprise Storage 7:flatpak-1.10.7-4.12.1 SUSE Enterprise Storage 7:flatpak-devel-1.10.7-4.12.1 SUSE Enterprise Storage 7:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Enterprise Storage 7:libflatpak0-1.10.7-4.12.1 SUSE Enterprise Storage 7:system-user-flatpak-1.10.7-4.12.1 SUSE Enterprise Storage 7:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Liberty Linux 8:flatpak-builder-1.0.14-2.el8 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:flatpak-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:flatpak-devel-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libflatpak0-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:system-user-flatpak-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak-devel-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libflatpak0-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:system-user-flatpak-1.10.7-4.12.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-devel-1.10.7-4.12.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libflatpak0-1.10.7-4.12.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:system-user-flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-devel-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-zsh-completion-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libflatpak0-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:system-user-flatpak-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:typelib-1_0-Flatpak-1_0-1.12.5-150400.1.11 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-devel-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-remote-flathub-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-zsh-completion-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libflatpak0-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:system-user-flatpak-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-devel-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-remote-flathub-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-zsh-completion-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libflatpak0-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:system-user-flatpak-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-devel-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-remote-flathub-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-zsh-completion-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libflatpak0-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:system-user-flatpak-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:flatpak-builder-1.2.2-150400.1.9 SUSE Linux Enterprise Module for Development Tools 15 SP5:flatpak-builder-1.2.2-150400.1.9 SUSE Linux Enterprise Module for Development Tools 15 SP6:flatpak-builder-1.2.3-150600.1.6 SUSE Linux Enterprise Module for Development Tools 15 SP7:flatpak-builder-1.2.3-150600.1.6 SUSE Linux Enterprise Real Time 15 SP2:flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Real Time 15 SP2:flatpak-devel-1.10.7-4.12.1 SUSE Linux Enterprise Real Time 15 SP2:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Linux Enterprise Real Time 15 SP2:libflatpak0-1.10.7-4.12.1 SUSE Linux Enterprise Real Time 15 SP2:system-user-flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Real Time 15 SP2:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-BCL:flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-BCL:flatpak-devel-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-BCL:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-BCL:libflatpak0-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-BCL:system-user-flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-BCL:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak-devel-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libflatpak0-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-LTSS:system-user-flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Server 15 SP2-LTSS:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Linux Enterprise Server 16.0:flatpak-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-devel-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-remote-flathub-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-selinux-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-zsh-completion-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:libflatpak0-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:system-user-flatpak-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak-devel-1.10.7-4.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libflatpak0-1.10.7-4.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:system-user-flatpak-1.10.7-4.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Manager Proxy 4.1:flatpak-1.10.7-4.12.1 SUSE Manager Proxy 4.1:flatpak-devel-1.10.7-4.12.1 SUSE Manager Proxy 4.1:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Manager Proxy 4.1:libflatpak0-1.10.7-4.12.1 SUSE Manager Proxy 4.1:system-user-flatpak-1.10.7-4.12.1 SUSE Manager Proxy 4.1:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Manager Retail Branch Server 4.1:flatpak-1.10.7-4.12.1 SUSE Manager Retail Branch Server 4.1:flatpak-devel-1.10.7-4.12.1 SUSE Manager Retail Branch Server 4.1:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Manager Retail Branch Server 4.1:libflatpak0-1.10.7-4.12.1 SUSE Manager Retail Branch Server 4.1:system-user-flatpak-1.10.7-4.12.1 SUSE Manager Retail Branch Server 4.1:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 SUSE Manager Server 4.1:flatpak-1.10.7-4.12.1 SUSE Manager Server 4.1:flatpak-devel-1.10.7-4.12.1 SUSE Manager Server 4.1:flatpak-zsh-completion-1.10.7-4.12.1 SUSE Manager Server 4.1:libflatpak0-1.10.7-4.12.1 SUSE Manager Server 4.1:system-user-flatpak-1.10.7-4.12.1 SUSE Manager Server 4.1:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 openSUSE Leap 15.3:flatpak-1.10.7-4.12.1 openSUSE Leap 15.3:flatpak-devel-1.10.7-4.12.1 openSUSE Leap 15.3:flatpak-zsh-completion-1.10.7-4.12.1 openSUSE Leap 15.3:libflatpak0-1.10.7-4.12.1 openSUSE Leap 15.3:system-user-flatpak-1.10.7-4.12.1 openSUSE Leap 15.3:typelib-1_0-Flatpak-1_0-1.10.7-4.12.1 openSUSE Leap 15.4:flatpak-1.12.5-150400.1.11 openSUSE Leap 15.4:libflatpak0-1.12.5-150400.1.11 openSUSE Leap 15.4:system-user-flatpak-1.12.5-150400.1.11 openSUSE Tumbleweed:flatpak-1.12.4-1.1 openSUSE Tumbleweed:flatpak-builder-1.2.2-1.1 openSUSE Tumbleweed:flatpak-devel-1.12.4-1.1 openSUSE Tumbleweed:flatpak-zsh-completion-1.12.4-1.1 openSUSE Tumbleweed:libflatpak0-1.12.4-1.1 openSUSE Tumbleweed:system-user-flatpak-1.12.4-1.1 openSUSE Tumbleweed:typelib-1_0-Flatpak-1_0-1.12.4-1.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-zsh-completion SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libflatpak0 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:system-user-flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP4:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Module for Development Tools 15 SP4:flatpak-builder SUSE CaaS Platform 4.0:flatpak SUSE CaaS Platform 4.0:flatpak-devel SUSE CaaS Platform 4.0:flatpak-zsh-completion SUSE CaaS Platform 4.0:libflatpak0 SUSE CaaS Platform 4.0:typelib-1_0-Flatpak-1_0 SUSE Enterprise Storage 6:flatpak SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:flatpak-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libflatpak0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libflatpak0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise High Performance Computing 15-LTSS:flatpak SUSE Linux Enterprise High Performance Computing 15-LTSS:flatpak-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libflatpak0 SUSE Linux Enterprise High Performance Computing 15-LTSS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-devel SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-zsh-completion SUSE Linux Enterprise Server 15 SP1-LTSS:libflatpak0 SUSE Linux Enterprise Server 15 SP1-LTSS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server 15-ESPOS:flatpak SUSE Linux Enterprise Server 15-LTSS:flatpak SUSE Linux Enterprise Server 15-LTSS:flatpak-devel SUSE Linux Enterprise Server 15-LTSS:libflatpak0 SUSE Linux Enterprise Server 15-LTSS:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:flatpak SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP1:libflatpak0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:typelib-1_0-Flatpak-1_0 SUSE Linux Enterprise Server for SAP Applications 15:flatpak SUSE Linux Enterprise Server for SAP Applications 15:flatpak-devel SUSE Linux Enterprise Server for SAP Applications 15:libflatpak0 SUSE Linux Enterprise Server for SAP Applications 15:typelib-1_0-Flatpak-1_0 moderate 4 AV:N/AC:L/Au:S/C:N/I:P/A:N 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N