diff --git a/NEWS b/NEWS index 88f3542c..220814c4 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,15 @@ +Changes in 1.8.5 +~~~~~~~~~~~~~~~~ +Released: 2020-01-14 + +This is a security update that fixes a sandbox escape where a +malicious application can execute code outside the sandbox +by controlling the environment of the "flatpak run" command +when spawning a sub-sandbox. + +See the advisory for details: + https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2 + Changes in 1.8.4 ~~~~~~~~~~~~~~~~ Released: 2020-12-22 diff --git a/configure.ac b/configure.ac index 00e27052..53021c9a 100644 --- a/configure.ac +++ b/configure.ac @@ -15,7 +15,7 @@ AC_PREREQ([2.63]) m4_define([flatpak_major_version], [1]) m4_define([flatpak_minor_version], [8]) -m4_define([flatpak_micro_version], [4]) +m4_define([flatpak_micro_version], [5]) m4_define([flatpak_extra_version], []) m4_define([flatpak_interface_age], [0]) m4_define([flatpak_binary_age],