Ubuntu
flatpak package

  1. Bug #1957716
  2. Comment #2

Comment 2 for bug 1957716

Revision history for this message
Simon McVittie (smcv) wrote : Re: Update for CVE-2021-43860 and second github advisory

The patches for CVE-2021-43860 (aka GHSA-qpjc-vq3c-572j) include some test-cases, which are run during build and as part of the autopkgtest.

There is currently no automated test coverage for GHSA-8ch7-5j3h-g4fx.

If possible I would recommend upgrading to 1.12.3 and 1.10.6, rather than backporting individual commits. The stable-branches are specifically there to be used by downstream distributions that want bugfix-only updates.