FEDORA-2018-b5ecac9405 — security update for flatpak

stable

flatpak-0.10.3-1.fc26

FEDORA-2018-b5ecac9405 created by kalev 8 years ago for Fedora 26

This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team.

Major changes in 0.10.3

Fix dbus proxy vulnerability in authentication phase
Make permission handling ignore unknown permissions for forwards compatibility
Removed incorrect error message in update --appdata when ther was no updates
Fix handling of abort in the duplicate remote prompt
Fix division by zero in progress calculation
Fix flatpak remote-info --show-metadata

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-b5ecac9405

This update has been submitted for testing by kalev.

8 years ago

This update has been pushed to testing.

8 years ago

pwalter commented & provided feedback 8 years ago

karma

Works

kalev edited this update.

8 years ago

jonathancalloway commented & provided feedback 8 years ago

karma

No regressions noted

This update has been submitted for batched by bodhi.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

This update has been pushed to stable.

8 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

Builds

flatpak-0.10.3-1.fc26

Automated Test Results

passed