mirror/flatpak
1
0
Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-05-16 20:56:52 -04:00
Code Issues Packages Projects Releases Wiki Activity

Update NEWS for 1.16.4

Browse Source
This commit is contained in:
Sebastian Wick
2026-04-07 22:43:12 +02:00
parent a27ec46e8c
commit 15dc23b1be
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
NEWS
View File

@@ -1,8 +1,18 @@
Changes in 1.16.4
~~~~~~~~~~~~~~~~~~
Released: not yet
Released: 2026-04-07
...
Security fixes:
* Fix a complete sandbox escape which leads to host file access and code
execution in the host context (CVE-2026-34078)
* Prevent arbitrary file deletion on the host filesystem (CVE-2026-34079)
* Prevent arbitrary read-access to files in the system-helper context
(GHSA-2fxp-43j9-pwvc)
* Prevent orphaning cross-user pull operations (GHSA-89xm-3m96-w3jg)
Changes in 1.16.3
~~~~~~~~~~~~~~~~~~