FEDORA-2018-bd651734da — security update for flatpak

stable

flatpak-0.10.3-1.fc27

FEDORA-2018-bd651734da created by kalev 8 years ago for Fedora 27

This is a security fix release that fixes a sandbox escape in the flatpak dbus proxy. This issue was found by Gabriel Campana of The Google Security Team.

Major changes in 0.10.3

Fix dbus proxy vulnerability in authentication phase
Make permission handling ignore unknown permissions for forwards compatibility
Removed incorrect error message in update --appdata when ther was no updates
Fix handling of abort in the duplicate remote prompt
Fix division by zero in progress calculation
Fix flatpak remote-info --show-metadata

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-bd651734da

This update has been submitted for testing by kalev.

8 years ago

This update has been pushed to testing.

8 years ago

filiperosset commented & provided feedback 8 years ago

karma

no regressions noted

cserpentis commented & provided feedback 8 years ago

karma

works for me

pwalter commented & provided feedback 8 years ago

karma

Works

This update has been submitted for batched by bodhi.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

This update has been pushed to stable.

8 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

flatpak-0.10.3-1.fc27

Automated Test Results

passed