CVE-2024-42472
HighAdvisory
Published 17 Sept 2024In the index since 8 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.013
- 68th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2
- of 17,781 indexed, latest versions
- Container images
- 2
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: bubblewrap and flatpak security update
Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bubblewraprpm | 0.4.1-6.el9 | 0:0.4.1-7.el9_4 | 1 |
| flatpakrpm | 1.12.9-1.el9_4 | 0:1.12.9-3.el9_4 | 1 |
| bubblewrapdeb | 0.6.1-1 | 0.6.1-1ubuntu0.1 | 1 |
- OSV records
- RHSA-2024:6356USN-7046-1
- Also known as
- RHSA-2024:9449
Charts affected
2 by stars
Container images carrying it
2 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| codetogether/ | 4348c8a38752 | bubblewrap flatpak | 0:0.4.1-7.el9_4 0:1.12.9-3.el9_4 | 1 |
| livekit/ | 1ab01641b366 | bubblewrap | 0.6.1-1ubuntu0.1 | 1 |