CVE-2023-28100 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-28100 Interim 1 19 2026-03-05T03:45:18Z current 2023-03-18T00:14:28Z 2026-03-05T03:45:18Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-28100 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be used in a Wayland or X11 graphical environment. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2023-March/028540.html E-Mail link for SUSE-SU-2023:1712-1 https://lists.suse.com/pipermail/sle-updates/2023-March/028539.html E-Mail link for SUSE-SU-2023:1713-1 https://lists.suse.com/pipermail/sle-updates/2023-March/028538.html E-Mail link for SUSE-SU-2023:1714-1 https://lists.suse.com/pipermail/sle-updates/2023-March/028537.html E-Mail link for SUSE-SU-2023:1715-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Liberty Linux 8 SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 openSUSE Leap 15.4 openSUSE Tumbleweed flatpak flatpak-1.10.8-1.el8 flatpak-1.10.8-150200.4.15.1 flatpak-1.12.8-1.el9 flatpak-1.12.8-150400.3.3.1 flatpak-1.14.4-1.1 flatpak-1.14.4-150500.1.3 flatpak-1.14.6-150600.1.2 flatpak-1.16.0-150600.3.6.1 flatpak-1.16.0-160000.2.2 flatpak-1.2.3-150100.4.11.1 flatpak-1.4.2-3.3.1 flatpak-devel flatpak-devel-1.10.8-1.el8 flatpak-devel-1.10.8-150200.4.15.1 flatpak-devel-1.12.8-1.el9 flatpak-devel-1.12.8-150400.3.3.1 flatpak-devel-1.14.4-1.1 flatpak-devel-1.14.4-150500.1.3 flatpak-devel-1.14.6-150600.1.2 flatpak-devel-1.16.0-150600.3.6.1 flatpak-devel-1.16.0-160000.2.2 flatpak-devel-1.2.3-150100.4.11.1 flatpak-libs-1.10.8-1.el8 flatpak-libs-1.12.8-1.el9 flatpak-remote-flathub flatpak-remote-flathub-1.14.4-1.1 flatpak-remote-flathub-1.14.4-150500.1.3 flatpak-remote-flathub-1.14.6-150600.1.2 flatpak-remote-flathub-1.16.0-150600.3.6.1 flatpak-remote-flathub-1.16.0-160000.2.2 flatpak-selinux-1.10.8-1.el8 flatpak-selinux-1.12.8-1.el9 flatpak-selinux-1.16.0-160000.2.2 flatpak-session-helper-1.10.8-1.el8 flatpak-session-helper-1.12.8-1.el9 flatpak-zsh-completion flatpak-zsh-completion-1.10.8-150200.4.15.1 flatpak-zsh-completion-1.12.8-150400.3.3.1 flatpak-zsh-completion-1.14.4-1.1 flatpak-zsh-completion-1.14.4-150500.1.3 flatpak-zsh-completion-1.14.6-150600.1.2 flatpak-zsh-completion-1.16.0-150600.3.6.1 flatpak-zsh-completion-1.16.0-160000.2.2 flatpak-zsh-completion-1.2.3-150100.4.11.1 libflatpak0 libflatpak0-1.10.8-150200.4.15.1 libflatpak0-1.12.8-150400.3.3.1 libflatpak0-1.14.4-1.1 libflatpak0-1.14.4-150500.1.3 libflatpak0-1.14.6-150600.1.2 libflatpak0-1.16.0-150600.3.6.1 libflatpak0-1.16.0-160000.2.2 libflatpak0-1.2.3-150100.4.11.1 libflatpak0-1.4.2-3.3.1 system-user-flatpak system-user-flatpak-1.10.8-150200.4.15.1 system-user-flatpak-1.12.8-150400.3.3.1 system-user-flatpak-1.14.4-1.1 system-user-flatpak-1.14.4-150500.1.3 system-user-flatpak-1.14.6-150600.1.2 system-user-flatpak-1.16.0-150600.3.6.1 system-user-flatpak-1.16.0-160000.2.2 typelib-1_0-Flatpak-1_0 typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 typelib-1_0-Flatpak-1_0-1.12.8-150400.3.3.1 typelib-1_0-Flatpak-1_0-1.14.4-1.1 typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 typelib-1_0-Flatpak-1_0-1.4.2-3.3.1 flatpak-1.2.3-150100.4.11.1 as a component of SUSE CaaS Platform 4.0 flatpak-devel-1.2.3-150100.4.11.1 as a component of SUSE CaaS Platform 4.0 flatpak-zsh-completion-1.2.3-150100.4.11.1 as a component of SUSE CaaS Platform 4.0 libflatpak0-1.2.3-150100.4.11.1 as a component of SUSE CaaS Platform 4.0 typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 as a component of SUSE CaaS Platform 4.0 flatpak-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7 flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7 flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7 libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7 system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7 typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7 flatpak-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7.1 flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7.1 flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7.1 libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7.1 system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7.1 typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Enterprise Storage 7.1 flatpak-1.10.8-1.el8 as a component of SUSE Liberty Linux 8 flatpak-devel-1.10.8-1.el8 as a component of SUSE Liberty Linux 8 flatpak-libs-1.10.8-1.el8 as a component of SUSE Liberty Linux 8 flatpak-selinux-1.10.8-1.el8 as a component of SUSE Liberty Linux 8 flatpak-session-helper-1.10.8-1.el8 as a component of SUSE Liberty Linux 8 flatpak-1.12.8-1.el9 as a component of SUSE Liberty Linux 9 flatpak-devel-1.12.8-1.el9 as a component of SUSE Liberty Linux 9 flatpak-libs-1.12.8-1.el9 as a component of SUSE Liberty Linux 9 flatpak-selinux-1.12.8-1.el9 as a component of SUSE Liberty Linux 9 flatpak-session-helper-1.12.8-1.el9 as a component of SUSE Liberty Linux 9 flatpak-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-devel-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-zsh-completion-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libflatpak0-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS flatpak-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-devel-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-zsh-completion-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libflatpak0-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 system-user-flatpak-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 typelib-1_0-Flatpak-1_0-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 flatpak-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-devel-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-remote-flathub-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-zsh-completion-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libflatpak0-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 system-user-flatpak-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-devel-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-remote-flathub-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-zsh-completion-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libflatpak0-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 system-user-flatpak-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 flatpak-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-devel-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-remote-flathub-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-zsh-completion-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libflatpak0-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 system-user-flatpak-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 flatpak-1.4.2-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP5 libflatpak0-1.4.2-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP5 typelib-1_0-Flatpak-1_0-1.4.2-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP5 flatpak-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-devel-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-zsh-completion-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libflatpak0-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS flatpak-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA flatpak-devel-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA flatpak-zsh-completion-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA libflatpak0-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA system-user-flatpak-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA typelib-1_0-Flatpak-1_0-1.12.8-150400.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA flatpak-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-devel-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-remote-flathub-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-selinux-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-zsh-completion-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libflatpak0-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 system-user-flatpak-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 flatpak-1.4.2-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libflatpak0-1.4.2-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 typelib-1_0-Flatpak-1_0-1.4.2-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 flatpak-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-devel-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-zsh-completion-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libflatpak0-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 flatpak-devel-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 flatpak-zsh-completion-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libflatpak0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 system-user-flatpak-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 flatpak-1.12.8-150400.3.3.1 as a component of openSUSE Leap 15.4 flatpak-devel-1.12.8-150400.3.3.1 as a component of openSUSE Leap 15.4 flatpak-zsh-completion-1.12.8-150400.3.3.1 as a component of openSUSE Leap 15.4 libflatpak0-1.12.8-150400.3.3.1 as a component of openSUSE Leap 15.4 system-user-flatpak-1.12.8-150400.3.3.1 as a component of openSUSE Leap 15.4 typelib-1_0-Flatpak-1_0-1.12.8-150400.3.3.1 as a component of openSUSE Leap 15.4 flatpak-1.14.4-1.1 as a component of openSUSE Tumbleweed flatpak-devel-1.14.4-1.1 as a component of openSUSE Tumbleweed flatpak-remote-flathub-1.14.4-1.1 as a component of openSUSE Tumbleweed flatpak-zsh-completion-1.14.4-1.1 as a component of openSUSE Tumbleweed libflatpak0-1.14.4-1.1 as a component of openSUSE Tumbleweed system-user-flatpak-1.14.4-1.1 as a component of openSUSE Tumbleweed typelib-1_0-Flatpak-1_0-1.14.4-1.1 as a component of openSUSE Tumbleweed flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-remote-flathub as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak-zsh-completion as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libflatpak0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 system-user-flatpak as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 typelib-1_0-Flatpak-1_0 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 flatpak as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be used in a Wayland or X11 graphical environment. CVE-2023-28100 SUSE CaaS Platform 4.0:flatpak-1.2.3-150100.4.11.1 SUSE CaaS Platform 4.0:flatpak-devel-1.2.3-150100.4.11.1 SUSE CaaS Platform 4.0:flatpak-zsh-completion-1.2.3-150100.4.11.1 SUSE CaaS Platform 4.0:libflatpak0-1.2.3-150100.4.11.1 SUSE CaaS Platform 4.0:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 SUSE Enterprise Storage 7:flatpak-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7:flatpak-devel-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7:libflatpak0-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7.1:flatpak-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7.1:flatpak-devel-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7.1:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7.1:libflatpak0-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7.1:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Enterprise Storage 7.1:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Liberty Linux 8:flatpak-1.10.8-1.el8 SUSE Liberty Linux 8:flatpak-devel-1.10.8-1.el8 SUSE Liberty Linux 8:flatpak-libs-1.10.8-1.el8 SUSE Liberty Linux 8:flatpak-selinux-1.10.8-1.el8 SUSE Liberty Linux 8:flatpak-session-helper-1.10.8-1.el8 SUSE Liberty Linux 9:flatpak-1.12.8-1.el9 SUSE Liberty Linux 9:flatpak-devel-1.12.8-1.el9 SUSE Liberty Linux 9:flatpak-libs-1.12.8-1.el9 SUSE Liberty Linux 9:flatpak-selinux-1.12.8-1.el9 SUSE Liberty Linux 9:flatpak-session-helper-1.12.8-1.el9 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-1.2.3-150100.4.11.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-devel-1.2.3-150100.4.11.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:flatpak-zsh-completion-1.2.3-150100.4.11.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libflatpak0-1.2.3-150100.4.11.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak-devel-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libflatpak0-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:flatpak-devel-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libflatpak0-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:flatpak-devel-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libflatpak0-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-1.12.8-150400.3.3.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-devel-1.12.8-150400.3.3.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:flatpak-zsh-completion-1.12.8-150400.3.3.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libflatpak0-1.12.8-150400.3.3.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:system-user-flatpak-1.12.8-150400.3.3.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:typelib-1_0-Flatpak-1_0-1.12.8-150400.3.3.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-devel-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-remote-flathub-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-zsh-completion-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libflatpak0-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:system-user-flatpak-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:typelib-1_0-Flatpak-1_0-1.14.4-150500.1.3 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-devel-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-remote-flathub-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:flatpak-zsh-completion-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libflatpak0-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:system-user-flatpak-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:typelib-1_0-Flatpak-1_0-1.14.6-150600.1.2 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-devel-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-remote-flathub-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:flatpak-zsh-completion-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libflatpak0-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:system-user-flatpak-1.16.0-150600.3.6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:typelib-1_0-Flatpak-1_0-1.16.0-150600.3.6.1 SUSE Linux Enterprise Real Time 15 SP3:flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Real Time 15 SP3:flatpak-devel-1.10.8-150200.4.15.1 SUSE Linux Enterprise Real Time 15 SP3:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Linux Enterprise Real Time 15 SP3:libflatpak0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Real Time 15 SP3:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Real Time 15 SP3:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 12 SP5:flatpak-1.4.2-3.3.1 SUSE Linux Enterprise Server 12 SP5:libflatpak0-1.4.2-3.3.1 SUSE Linux Enterprise Server 12 SP5:typelib-1_0-Flatpak-1_0-1.4.2-3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-devel-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server 15 SP1-LTSS:flatpak-zsh-completion-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libflatpak0-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server 15 SP1-LTSS:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak-devel-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP2-LTSS:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libflatpak0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP2-LTSS:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP2-LTSS:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:flatpak-devel-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libflatpak0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:flatpak-1.12.8-150400.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:flatpak-devel-1.12.8-150400.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:flatpak-zsh-completion-1.12.8-150400.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:libflatpak0-1.12.8-150400.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:system-user-flatpak-1.12.8-150400.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:typelib-1_0-Flatpak-1_0-1.12.8-150400.3.3.1 SUSE Linux Enterprise Server 16.0:flatpak-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-devel-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-remote-flathub-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-selinux-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:flatpak-zsh-completion-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:libflatpak0-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:system-user-flatpak-1.16.0-160000.2.2 SUSE Linux Enterprise Server 16.0:typelib-1_0-Flatpak-1_0-1.16.0-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:flatpak-1.4.2-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libflatpak0-1.4.2-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:typelib-1_0-Flatpak-1_0-1.4.2-3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-devel-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:flatpak-zsh-completion-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libflatpak0-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak-devel-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libflatpak0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:flatpak-devel-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:flatpak-zsh-completion-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libflatpak0-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:system-user-flatpak-1.10.8-150200.4.15.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-Flatpak-1_0-1.10.8-150200.4.15.1 openSUSE Leap 15.4:flatpak-1.12.8-150400.3.3.1 openSUSE Leap 15.4:flatpak-devel-1.12.8-150400.3.3.1 openSUSE Leap 15.4:flatpak-zsh-completion-1.12.8-150400.3.3.1 openSUSE Leap 15.4:libflatpak0-1.12.8-150400.3.3.1 openSUSE Leap 15.4:system-user-flatpak-1.12.8-150400.3.3.1 openSUSE Leap 15.4:typelib-1_0-Flatpak-1_0-1.12.8-150400.3.3.1 openSUSE Tumbleweed:flatpak-1.14.4-1.1 openSUSE Tumbleweed:flatpak-devel-1.14.4-1.1 openSUSE Tumbleweed:flatpak-remote-flathub-1.14.4-1.1 openSUSE Tumbleweed:flatpak-zsh-completion-1.14.4-1.1 openSUSE Tumbleweed:libflatpak0-1.14.4-1.1 openSUSE Tumbleweed:system-user-flatpak-1.14.4-1.1 openSUSE Tumbleweed:typelib-1_0-Flatpak-1_0-1.14.4-1.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-remote-flathub SUSE Linux Enterprise Module for Desktop Applications 15 SP5:flatpak-zsh-completion SUSE Linux Enterprise Module for Desktop Applications 15 SP5:libflatpak0 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:system-user-flatpak SUSE Linux Enterprise Module for Desktop Applications 15 SP5:typelib-1_0-Flatpak-1_0 important 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H