Vulnerability in flatpak-builder: Bug Fix and Enhancement Update

flatpak-builder Updated 02 Oct 2025

Summary

03/11/2020
N/A
Yes i
Unrated
Not published

ALBA-2020:4646: flatpak-builder bug fix and enhancement update. Affects flatpak-builder versions < 1.0.9-3.el8. Fixed in 1.0.9-3.el8. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Penetration testing for web, API and mobile Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

flatpak-builder is a tool used for building Flatpak applications. It provides a streamlined workflow for developers to create and package applications in a sandboxed environment. This vulnerability affects flatpak-builder in AlmaLinux 8.

Vulnerability Detail

This vulnerability in flatpak-builder (AlmaLinux:8) was identified as ALBA-2020:4646. It is a bug fix and enhancement update that addresses various issues in the package. The vulnerability was first published on November 3, 2020, and the latest modification was made on November 12, 2021. The vulnerability ranges from version 0 to 1.0.9-3.el8. The exact technical details and impact of the vulnerability are not provided in the available information.

How To Fix

Minimum fixed version

1.0.9-3.el8

This is the first release that contains the fix.

sudo dnf update flatpak-builder

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Conclusion

The vulnerability in flatpak-builder (AlmaLinux:8) is a bug fix and enhancement update. To fix this vulnerability, it is recommended to update the flatpak-builder package to version 1.0.9-3.el8 or later. Regularly updating packages is important to ensure the latest security patches and bug fixes are applied. For further support on vulnerability remediation, contact DevNack.com.

See every vulnerability recorded for flatpak-builder →

Share this vulnerability

FAQ

flatpak-builder is a tool used for building Flatpak applications. It provides a streamlined workflow for developers to create and package applications in a sandboxed environment.

The exact impact of this vulnerability is not provided in the available information. However, it is important to update the package to ensure the latest security patches and bug fixes are applied.

To update the flatpak-builder package, follow the package update instructions provided by AlmaLinux. It is recommended to update to version 1.0.9-3.el8 or later.

No workaround is mentioned in the available information. It is recommended to update the package to fix the vulnerability.

For more detailed information on this vulnerability, refer to the AlmaLinux Release Notes linked in the References section of the vulnerability details.

Related vulnerabilities

Recent vulnerabilities recorded for flatpak-builder.

How To Fix

Minimum fixed version

1.0.9-3.el8

This is the first release that contains the fix.

sudo dnf update flatpak-builder

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback