Debian Security Advisory DSA 4390-1 (flatpak - security update)

It was discovered that Flatpak, an application deployment framework for desktop apps, insufficiently restricted the execution of apply_extra scripts which could potentially result in privilege escalation. This vulnerability is similar to the runc CVE-2019-5736 vulnerability found within docker.

flatpak on Debian Linux

This check tests the installed software version using the apt package manager.

For the stable distribution (stretch), this problem has been fixed in version 0.8.9-0+deb9u2. We recommend that you upgrade your flatpak packages. For the detailed security status of flatpak please refer to its security tracker page linked in the references.