Sebastian Wick 044a44fe2e dir: Fall back to the deployed ref commit when up/downgrading ...

Otherwise, if an unprivileged user manages to remove the remote ref, the
downgrading protection is not in effect.

Helps: https://github.com/flatpak/flatpak/security/advisories/GHSA-q4gr-vc25-57m5

2026-08-11 01:22:28 +02:00

..

flatpak-appdata-private.h

…

flatpak-appdata.c

…

flatpak-auth-private.h

…

flatpak-auth.c

…

flatpak-bundle-ref.c

…

flatpak-bundle-ref.h

…

flatpak-bwrap-private.h

…

flatpak-bwrap.c

…

flatpak-chain-input-stream-private.h

…

flatpak-chain-input-stream.c

…

flatpak-common-types-private.h

…

flatpak-context-private.h

…

flatpak-context.c

…

flatpak-dir-private.h

…

flatpak-dir-utils-private.h

…

flatpak-dir-utils.c

dir-utils: Reject path traversal in extension metadata

2026-08-10 23:06:17 +02:00

flatpak-dir.c

dir: Fall back to the deployed ref commit when up/downgrading

2026-08-11 01:22:28 +02:00

flatpak-docker-reference-private.h

…

flatpak-docker-reference.c

…

flatpak-enum-types.c.template

…

flatpak-enum-types.h.template

…

flatpak-error.c

…

flatpak-error.h

…

flatpak-exports-private.h

…

flatpak-exports.c

…

flatpak-glib-backports-private.h

…

flatpak-glib-backports.c

…

flatpak-image-collection-private.h

…

flatpak-image-collection.c

…

flatpak-image-source-private.h

…

flatpak-image-source.c

…

flatpak-installation-private.h

…

flatpak-installation.c

…

flatpak-installation.h

…

flatpak-installed-ref-private.h

…

flatpak-installed-ref.c

…

flatpak-installed-ref.h

…

flatpak-instance-private.h

…

flatpak-instance.c

…

flatpak-instance.h

…

flatpak-json-backports-private.h

…

flatpak-json-oci-private.h

…

flatpak-json-oci.c

…

flatpak-json-private.h

…

flatpak-json.c

…

flatpak-locale-utils-private.h

…

flatpak-locale-utils.c

…

flatpak-metadata-private.h

…

flatpak-oci-registry-private.h

…

flatpak-oci-registry.c

oci: Rebase hardlink targets in OCI archive extraction

2026-08-11 01:22:28 +02:00

flatpak-oci-signatures-private.h

…

flatpak-oci-signatures.c

…

flatpak-parental-controls-private.h

…

flatpak-parental-controls.c

…

flatpak-portal-error.c

…

flatpak-portal-error.h

…

flatpak-progress-private.h

…

flatpak-progress.c

…

flatpak-prune-private.h

…

flatpak-prune.c

…

flatpak-ref-utils-private.h

ref-utils: Make remote name validation public and take an error

2026-08-10 23:06:17 +02:00

flatpak-ref-utils.c

ref-utils: Make remote name validation public and take an error

2026-08-10 23:06:17 +02:00

flatpak-ref.c

…

flatpak-ref.h

…

flatpak-related-ref-private.h

…

flatpak-related-ref.c

…

flatpak-related-ref.h

…

flatpak-remote-private.h

…

flatpak-remote-ref-private.h

…

flatpak-remote-ref.c

…

flatpak-remote-ref.h

…

flatpak-remote.c

…

flatpak-remote.h

…

flatpak-repo-utils-private.h

…

flatpak-repo-utils.c

…

flatpak-run-cups-private.h

…

flatpak-run-cups.c

…

flatpak-run-dbus-private.h

…

flatpak-run-dbus.c

run-dbus: Correct --broadcast rules for the AT-SPI bus

2026-08-10 23:06:17 +02:00

flatpak-run-private.h

…

flatpak-run-pulseaudio-private.h

…

flatpak-run-pulseaudio.c

…

flatpak-run-sockets-private.h

…

flatpak-run-sockets.c

…

flatpak-run-wayland-private.h

…

flatpak-run-wayland.c

…

flatpak-run-x11-private.h

…

flatpak-run-x11.c

…

flatpak-run.c

run: Use RESOLVE_BENEATH for host-side extension file access

2026-08-11 01:22:28 +02:00

flatpak-syscalls-private.h

…

flatpak-transaction-private.h

…

flatpak-transaction.c

…

flatpak-transaction.h

…

flatpak-uri-private.h

…

flatpak-uri.c

…

flatpak-usb-private.h

…

flatpak-usb.c

…

flatpak-utils-base-private.h

…

flatpak-utils-base.c

…

flatpak-utils-http-private.h

…

flatpak-utils-http.c

…

flatpak-utils-private.h

common: Use fd-based operations in flatpak_switch_symlink_and_remove

2026-08-10 23:06:17 +02:00

flatpak-utils.c

common: Use fd-based operations in flatpak_switch_symlink_and_remove

2026-08-10 23:06:17 +02:00

flatpak-version-macros.h.in

…

flatpak-xml-utils-private.h

…

flatpak-xml-utils.c

…

flatpak-zstd-compressor-private.h

…

flatpak-zstd-compressor.c

…

flatpak-zstd-decompressor-private.h

…

flatpak-zstd-decompressor.c

…

flatpak.c

…

flatpak.h

…

meson.build

…

test-lib.c

…

valgrind-private.h

…