Format: 1.8
Date: Wed, 10 Mar 2021 20:54:38 +0000
Source: flatpak
Binary: flatpak flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0
Architecture: amd64 all
Version: 1.8.2-1ubuntu0.2
Distribution: groovy
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-027.buildd>
Changed-By: Andrew Hayzen <ahayzen@ubuntu.com>
Description:
 flatpak    - Application deployment framework for desktop apps
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection)
 libflatpak-dev - Application deployment framework for desktop apps (development)
 libflatpak-doc - Application deployment framework for desktop apps (documentation)
 libflatpak0 - Application deployment framework for desktop apps (library)
Launchpad-Bugs-Fixed: 1918482
Changes:
 flatpak (1.8.2-1ubuntu0.2) groovy-security; urgency=medium
 .
   * SECURITY UPDATE: Flatpak sandbox escape via crafted .desktop file
     (LP: #1918482)
    - debian/patches/CVE-2021-21381-1.patch: Disallow @@ and @@u usage in
      desktop files.
    - debian/patches/CVE-2021-21381-2.patch: dir: Reserve the whole @@
      prefix.
    - debian/patches/CVE-2021-21381-3.patch: dir: Refuse to export
      .desktop files with suspicious uses.
    - CVE-2021-21381
Checksums-Sha1:
 ba2b7f17e5cee38776d59ad460070473b5e17e50 5026920 flatpak-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 7793a7bfa3ec14a8b75daaa99ce6e29b5b67655e 2353256 flatpak-tests-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 2a62a528eff51da29069ee3595b585c6fe2234d4 486732 flatpak-tests_1.8.2-1ubuntu0.2_amd64.deb
 2b6cd0c0e7496b78670d26b7a0a7d2aa692c644c 15176 flatpak_1.8.2-1ubuntu0.2_amd64.buildinfo
 6dcb4651d45ec29dfe0d547ad9f478ecbe68ca64 1151352 flatpak_1.8.2-1ubuntu0.2_amd64.deb
 0902c0503feb3c4523f6f2276ab0a1fd2b558e78 11416 gir1.2-flatpak-1.0_1.8.2-1ubuntu0.2_amd64.deb
 680bc00f491d61a7eeb7cfd1560cb798c6434d5e 50200 libflatpak-dev_1.8.2-1ubuntu0.2_amd64.deb
 b28b0be3cfb600d4aa34da0db5d53a86930bae21 94744 libflatpak-doc_1.8.2-1ubuntu0.2_all.deb
 dcffa202ec8a2d92b31d9fca0ee189459eb6b068 1251832 libflatpak0-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 d5110dacebc0d4422e9b492c9ac1790c0dc238c4 290012 libflatpak0_1.8.2-1ubuntu0.2_amd64.deb
Checksums-Sha256:
 06c9d847e296ab8d360446a91a2076c1468ab886384e53ccf7ae4082cbcb744e 5026920 flatpak-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 4702d4024a7a340de16df4ef7019d6f43bce2f44ebfe593e9296bfb5519e1e5c 2353256 flatpak-tests-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 bbcd159a76b156ac99b3ea092357111cca05a9827ca7f23578955145cf5cd529 486732 flatpak-tests_1.8.2-1ubuntu0.2_amd64.deb
 ec798cadaae995bd4a55eed7e3c79e21067c6514cf2ed0114a8f64f7a83577a5 15176 flatpak_1.8.2-1ubuntu0.2_amd64.buildinfo
 d9859042dff8f963002173c6b416cc3f12198cf67ac513def56b95b3a009737b 1151352 flatpak_1.8.2-1ubuntu0.2_amd64.deb
 ce29f6977b41236e2fb1edbf514baa903fa07aa5aa31bbe5692ff732b5981d68 11416 gir1.2-flatpak-1.0_1.8.2-1ubuntu0.2_amd64.deb
 149879f7e027051f3c59c3b0a06a17b13bd628f88c4c7e0da13b2318a8c645e0 50200 libflatpak-dev_1.8.2-1ubuntu0.2_amd64.deb
 31968b0e83e7f058a6a87fd965f77e210db5caac38566ad66f39ce5a89d19729 94744 libflatpak-doc_1.8.2-1ubuntu0.2_all.deb
 3819106da8c973f0f3e92ca7964abd9a3e8b3066891a9f63e217b1480f14ea1f 1251832 libflatpak0-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 b16ecee8db10b8fef8c039707e3b2e22ac4e3976fc42377a5277a0554faeb3ce 290012 libflatpak0_1.8.2-1ubuntu0.2_amd64.deb
Files:
 d64158acec478b930bdd4524ba7624d8 5026920 debug optional flatpak-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 398ac9a3b5cd0a173b554f938fe1964f 2353256 debug optional flatpak-tests-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 eae0096c8cfd6d9f974164f22eb3a338 486732 misc optional flatpak-tests_1.8.2-1ubuntu0.2_amd64.deb
 3f72ee461c41c9fd4dd079fae47bdf25 15176 admin optional flatpak_1.8.2-1ubuntu0.2_amd64.buildinfo
 f206a4e5034013dcc2d4f22bfdbe75cb 1151352 admin optional flatpak_1.8.2-1ubuntu0.2_amd64.deb
 43e16b930649029c61aae4ad2e9d7123 11416 introspection optional gir1.2-flatpak-1.0_1.8.2-1ubuntu0.2_amd64.deb
 b6c54536c4ba639ee3a7f6860274081b 50200 libdevel optional libflatpak-dev_1.8.2-1ubuntu0.2_amd64.deb
 b791dd6b85696d00932db0f86b2f78a6 94744 doc optional libflatpak-doc_1.8.2-1ubuntu0.2_all.deb
 07cb1566b7dd30ffccd006a4749132d1 1251832 debug optional libflatpak0-dbgsym_1.8.2-1ubuntu0.2_amd64.ddeb
 cc3b421e64addc6cffb431d4d2424fc6 290012 libs optional libflatpak0_1.8.2-1ubuntu0.2_amd64.deb
Original-Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>