Ubuntu
flatpak package

flatpak 1.8.2-1ubuntu0.1 source package in Ubuntu

Changelog

flatpak (1.8.2-1ubuntu0.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Flatpak sandbox escape via spawn portal (LP: #1911473)
    - debian/patches/CVE-2021-21261-1.patch: common: Add a backport of
      G_DBUS_METHOD_INVOCATION_HANDLED.
    - debian/patches/CVE-2021-21261-2.patch: run: Convert all environment
      variables into bwrap arguments.
    - debian/patches/CVE-2021-21261-3.patch: tests: Expand coverage for
      environment variable overrides.
    - debian/patches/CVE-2021-21261-4.patch: context: Add --env-fd option.
    - debian/patches/CVE-2021-21261-5.patch: portal: Convert --env in
      extra-args into --env-fd.
    - debian/patches/CVE-2021-21261-6.patch: tests: Exercise --env-fd.
    - debian/patches/CVE-2021-21261-7.patch: portal: Do not use
      caller-supplied variables in environment.
    - debian/patches/CVE-2021-21261-8.patch: tests: Assert that --env= does
      not go in `flatpak run` or bwrap environ.
    - CVE-2021-21261

 -- Andrew Hayzen <email address hidden>  Fri, 22 Jan 2021 00:59:12 +0000

Upload details

Uploaded by:
Andrew Hayzen
Sponsored by:
Paulo Flabiano Smorigo
Uploaded to:
Groovy
Original maintainer:
Ubuntu Developers
Architectures:
linux-any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
flatpak_1.8.2.orig.tar.xz 1.4 MiB 7926625df7c2282a5ee1a8b3c317af53d40a663b1bc6b18a2dc8747e265085b0
flatpak_1.8.2-1ubuntu0.1.debian.tar.xz 35.7 KiB aafc53087934da7467bef64aed03c229b2d165e5d2bee8bdb18e8efa852e519b
flatpak_1.8.2-1ubuntu0.1.dsc 3.5 KiB 964ada6b5add5a820bf19a278a6f37e2ded8d7706f7f40f8c6aa8fdbb3ff3e83

View changes file

Binary packages built by this source

flatpak: No summary available for flatpak in ubuntu groovy.

No description available for flatpak in ubuntu groovy.

flatpak-dbgsym: No summary available for flatpak-dbgsym in ubuntu groovy.

No description available for flatpak-dbgsym in ubuntu groovy.

flatpak-tests: No summary available for flatpak-tests in ubuntu groovy.

No description available for flatpak-tests in ubuntu groovy.

flatpak-tests-dbgsym: No summary available for flatpak-tests-dbgsym in ubuntu groovy.

No description available for flatpak-tests-dbgsym in ubuntu groovy.

gir1.2-flatpak-1.0: No summary available for gir1.2-flatpak-1.0 in ubuntu groovy.

No description available for gir1.2-flatpak-1.0 in ubuntu groovy.

libflatpak-dev: No summary available for libflatpak-dev in ubuntu groovy.

No description available for libflatpak-dev in ubuntu groovy.

libflatpak-doc: No summary available for libflatpak-doc in ubuntu groovy.

No description available for libflatpak-doc in ubuntu groovy.

libflatpak0: No summary available for libflatpak0 in ubuntu groovy.

No description available for libflatpak0 in ubuntu groovy.

libflatpak0-dbgsym: No summary available for libflatpak0-dbgsym in ubuntu groovy.

No description available for libflatpak0-dbgsym in ubuntu groovy.