mirror/flatpak
1
0
Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-07-01 11:47:15 -04:00
Code Issues Packages Projects Releases Wiki Activity

Update NEWS

Browse Source 
Signed-off-by: Simon McVittie <smcv@collabora.com>
This commit is contained in:
Simon McVittie
2024-04-17 18:16:44 +01:00
parent 25ef001b1e
commit 381bc1a06b
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
NEWS
View File

@@ -1,3 +1,13 @@
Changes in 1.10.9
~~~~~~~~~~~~~~~~~
Security fixes:
* Don't allow an executable name to be misinterpreted as a command-line
option for bwrap(1). This prevents a sandbox escape where a malicious
or compromised app could ask xdg-desktop-portal to generate a .desktop
file with access to files outside the sandbox. (CVE-2024-32462)
Changes in 1.10.8
~~~~~~~~~~~~~~~~~
Released: 2023-03-16