Format: 1.8
Date: Wed, 10 Mar 2021 20:51:04 +0000
Source: flatpak
Binary: flatpak flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0
Architecture: ppc64el
Version: 1.0.9-0ubuntu0.3
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-ppc64el-009.buildd>
Changed-By: Andrew Hayzen <ahayzen@ubuntu.com>
Description:
 flatpak    - Application deployment framework for desktop apps
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection)
 libflatpak-dev - Application deployment framework for desktop apps (development)
 libflatpak-doc - Application deployment framework for desktop apps (documentation)
 libflatpak0 - Application deployment framework for desktop apps (library)
Launchpad-Bugs-Fixed: 1918482
Changes:
 flatpak (1.0.9-0ubuntu0.3) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: Flatpak sandbox escape via crafted .desktop file
     (LP: #1918482)
    - debian/patches/CVE-2021-21381-1.patch: Disallow @@ and @@u usage in
      desktop files.
    - debian/patches/CVE-2021-21381-2.patch: dir: Reserve the whole @@
      prefix.
    - debian/patches/CVE-2021-21381-3.patch: dir: Refuse to export
      .desktop files with suspicious uses.
    - CVE-2021-21381
Checksums-Sha1:
 4a02c4715cc94fd9abfbb6808f1e8fff1db0e87f 3416024 flatpak-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 e241936e49a7d4af2a28278b86eba2e8cf0e8129 942352 flatpak-tests-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 e338cce29e6d22de345a45d1196c737e44daef8b 266984 flatpak-tests_1.0.9-0ubuntu0.3_ppc64el.deb
 53cba717e7ab616db49b876fddf6e1c516bbb42c 14674 flatpak_1.0.9-0ubuntu0.3_ppc64el.buildinfo
 d2c51852921815b7553bc883f3238eb35885acfa 787088 flatpak_1.0.9-0ubuntu0.3_ppc64el.deb
 de862c7773b84c993ae44f5862a4046067d1b5e1 9812 gir1.2-flatpak-1.0_1.0.9-0ubuntu0.3_ppc64el.deb
 383791eb1610b9bdc43ec5840ca8407ee5eb235b 27284 libflatpak-dev_1.0.9-0ubuntu0.3_ppc64el.deb
 9c4f18c2c6b274ac7e195e0b4e41c56f57230d02 1045416 libflatpak0-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 5f65b4229a242f06278040b67951ab3f871b90ff 245292 libflatpak0_1.0.9-0ubuntu0.3_ppc64el.deb
Checksums-Sha256:
 f4d489f54a13a9144ab6f461028838f8126359def88340831d687d2850bcbea8 3416024 flatpak-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 c7fafdfac16823ce4576d293bfa491519cdf923c3dd16eb7fceda240a22a96fb 942352 flatpak-tests-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 cb0bdb772dd4931b4efaa35c4d6d62b366e3e71d3e1177df16a057b5d451ed5d 266984 flatpak-tests_1.0.9-0ubuntu0.3_ppc64el.deb
 5c02c88382ecf091c695177cc47d1cd38964341d942aac676dca93bbcf645282 14674 flatpak_1.0.9-0ubuntu0.3_ppc64el.buildinfo
 09fc3a7fae409dc45a9be74d40327a793e3f69ac7ec3fa054e5d0899cf831acd 787088 flatpak_1.0.9-0ubuntu0.3_ppc64el.deb
 5a10bf5f8b1a75a435b543d103ff8b9409df61ed02f7a21462b7beb954a8f8ee 9812 gir1.2-flatpak-1.0_1.0.9-0ubuntu0.3_ppc64el.deb
 f6b014ea09f924cf161420f010eae430b3deb3b0cad5fd7dc6951df46611436f 27284 libflatpak-dev_1.0.9-0ubuntu0.3_ppc64el.deb
 635941a97d026043178747e772fa4fc66fea8c60b88404d529cd79dcae33dfbf 1045416 libflatpak0-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 580f3326238286990a954ca0b8206960d9abfce6fbabdf06e259a2979e1072eb 245292 libflatpak0_1.0.9-0ubuntu0.3_ppc64el.deb
Files:
 1aa7dcc0f2c0359238327b8a28ddaed0 3416024 debug optional flatpak-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 d5113ea48fb46b9dc5cd69be62cdc56d 942352 debug optional flatpak-tests-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 c5087bd63d15ebb453a4054125c44e63 266984 misc optional flatpak-tests_1.0.9-0ubuntu0.3_ppc64el.deb
 7a2144da45bdd679e8b699ca37712bb8 14674 admin optional flatpak_1.0.9-0ubuntu0.3_ppc64el.buildinfo
 184771339a80db7bbaf373c6bd2e1643 787088 admin optional flatpak_1.0.9-0ubuntu0.3_ppc64el.deb
 10d253a5223a62586c77011f3742db0d 9812 introspection optional gir1.2-flatpak-1.0_1.0.9-0ubuntu0.3_ppc64el.deb
 6d8b45e724c22c2a1a0aa980185e5168 27284 libdevel optional libflatpak-dev_1.0.9-0ubuntu0.3_ppc64el.deb
 6e23c01e9eb03e6a21925d4d27b458a2 1045416 debug optional libflatpak0-dbgsym_1.0.9-0ubuntu0.3_ppc64el.ddeb
 02546e5148d66c88b9e6f0fb0cfcf974 245292 libs optional libflatpak0_1.0.9-0ubuntu0.3_ppc64el.deb
Original-Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>