FEDORA-2021-fe7decc595 created by kalev 3 months ago for Fedora 34
stable

flatpak 1.10.2 release.

This is a security update which fixes a potential attack where a flatpak application could use custom formated .desktop files to gain access to files on the host system.

Other changes:

  • Fix memory leaks
  • Some test fixes
  • Documentation updates
  • G_BEGIN/END_DECLS added to library headders for c++ use
  • Fix for X11 cookies on OpenSUSE
  • Spawn portal better handles non-utf8 filenames

How to install

sudo dnf upgrade --advisory=FEDORA-2021-fe7decc595

This update has been submitted for testing by kalev.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update's test gating status has been changed to 'waiting'.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has been pushed to testing.

3 months ago
User Icon renault commented & provided feedback 3 months ago
karma

Works fine

This update can be pushed to stable now if the maintainer wishes

3 months ago
karma
User Icon bklepzig commented & provided feedback 3 months ago
karma

Flatpak applications appear to install and run successfully.

This update has been submitted for stable by bodhi.

3 months ago

This update has been pushed to stable.

3 months ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
3
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
3 months ago
in testing
3 months ago
in stable
3 months ago
BZ#1936985 CVE-2021-21381 flatpak: the "file forwarding" feature can be used to gain unprivileged access to files
0
0
BZ#1936986 CVE-2021-21381 flatpak: the "file forwarding" feature can be used to gain unprivileged access to files [fedora-all]
0
0

Automated Test Results