Simon McVittie de68092f7f run: Prevent TIOCLINUX ioctl, the same as TIOCSTI ...

The TIOCLINUX ioctl is only available on Linux virtual consoles such as
/dev/tty1. It has several Linux-specific functions, one of which is a
copy/paste operation which can be used for attacks similar to TIOCSTI.

This vulnerability does not affect typical graphical terminal emulators
such as xterm, gnome-terminal and Konsole, and Flatpak is primarily
designed to be run from a Wayland or X11 graphical environment, so this
is relatively unlikely to be a practical problem.

CVE-2023-28100, GHSA-7qpw-3vjv-xrqp

Resolves: https://github.com/flatpak/flatpak/security/advisories/GHSA-7qpw-3vjv-xrqp
Signed-off-by: Simon McVittie <smcv@debian.org>

2023-03-16 09:55:31 +00:00

..

test-keyring

Add make-test-bundles.sh

2016-02-25 15:27:37 +01:00

test-keyring2

tests: Add a second gpg keyring

2017-05-10 11:54:27 +02:00

can-use-fuse.c

tests: Disable revokefs if FUSE doesn't work

2021-02-09 09:33:57 +01:00

can-use-fuse.h

tests: Disable revokefs if FUSE doesn't work

2021-02-09 09:33:57 +01:00

expand-test-matrix.sh

Fix misspellings

2019-04-08 12:50:42 +00:00

flatpak.supp

tests: Add ostree ioctl valgrind suprression

2020-08-24 08:53:31 +02:00

glib.supp

tests: Add new glib suppression

2019-12-17 14:55:13 +01:00

hold-lock.c

tests: Add basic test coverage for GC'ing unused instance directories

2021-04-06 11:53:23 +02:00

http-utils-test-server.py

tests: Use regular HTTPServer, not ThreadingHTTPServer

2019-10-09 14:25:44 +02:00

httpcache.c

Fix a leak of SoupSession

2019-03-06 23:44:50 +00:00

libpreload.c

tests: Assert that --env= does not go in flatpak run or bwrap environ

2021-01-14 09:33:24 +01:00

libtest.sh

test-override: Assert that only the expected term is negated

2022-01-17 16:03:25 +00:00

list-unused.c

transaction: inject eol status to flatpak_dir_list_unused_refs()

2020-10-08 09:14:51 +02:00

make-multi-collection-id-repo.sh

tests: Add ability to test a branch other than master

2019-03-30 13:02:10 +00:00

make-test-app.sh

Ensure special characters in permissions and metadata are escaped

2023-03-16 09:55:31 +00:00

make-test-runtime.sh

tests: Avoid unnecessarily recreating the summary file

2020-11-17 15:20:43 +01:00

Makefile-test-matrix.am.inc

Add a unit test for the history command

2022-02-08 10:12:24 -08:00

Makefile.am.inc

tests: Don't install tap-driver.sh in the installed-tests

2022-03-14 13:29:17 +00:00

mock-flatpak.c

portal: Add some test coverage

2021-05-25 11:11:03 +02:00

oci-registry-client.py

tests: Convert all tests to python3

2019-10-07 11:38:24 +02:00

oci-registry-server.py

Tests: Support HEAD requests in oci-registry-server

2020-05-04 16:32:22 +02:00

org.flatpak.Authenticator.test.service.in

tests: Add a test authenticator

2019-11-26 16:37:01 +01:00

org.freedesktop.impl.portal.desktop.test.service.in

tests: Add simple testing portal backend and wire it up to the tests

2019-10-02 14:57:11 +02:00

org.test.Hello.png

Add appdata to test apps

2016-02-25 19:03:09 +01:00

session.conf.in

Add some missing files from the tests

2016-05-02 10:46:51 +02:00

test-auth.sh

tests: Avoid unnecessarily recreating the summary file

2020-11-17 15:20:43 +01:00

test-authenticator.c

fix spelling

2021-08-23 12:19:03 +02:00

test-basic.sh

test-basic: Don't fail if head -2 exits before flatpak does

2021-04-12 11:07:10 +02:00

test-build-update-repo.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-bundle.sh

tests: Allow FLATPAK_BINARY=flatpak for exports

2022-01-04 10:44:37 -08:00

test-completion.sh

run: Add option to share /dev/shm between instances of an app-ID

2021-04-16 08:57:20 +02:00

test-config.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-context.c

Reject paths given to --filesystem/--persist with special characters

2023-03-16 09:55:31 +00:00

test-default-remotes.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-exports.c

test-exports: Exercise host:reset and related filesystem tokens

2022-01-18 16:35:28 +00:00

test-extensions.sh

tests: Avoid unnecessarily recreating the summary file

2020-11-17 15:20:43 +01:00

test-history.sh

test-history: Skip test if we cannot read from the Journal

2022-02-21 16:44:44 -06:00

test-http-utils.sh

Merge pull request #3476 from alexlarsson/drop-p2p

2020-03-25 09:54:41 +01:00

test-info.sh

Ensure special characters in permissions and metadata are escaped

2023-03-16 09:55:31 +00:00

test-instance.c

test-instance: Add more assertions

2021-04-19 09:09:04 +02:00

test-metadata-validation.sh

Add test for metadata validation

2022-01-12 11:52:39 +01:00

test-oci-registry.sh

test-oci-registry.sh: Fix filename in assertion

2020-06-22 11:05:53 +02:00

test-oci.sh

tests: Remove hard-coded references to x86_64

2021-03-10 10:35:18 +01:00

test-override.sh

test-override: Exercise --nofilesystem=host:reset

2022-01-18 16:35:28 +00:00

test-portal-impl.c

tests: Use g_assert_true() not g_assert()

2020-08-17 09:21:30 +02:00

test-portal.c

portal: Add some test coverage

2021-05-25 11:11:03 +02:00

test-prune.sh

tests: Add test for the flatpak prune implementation

2021-04-26 10:30:14 +02:00

test-repair.sh

Add a test for the repair command

2022-01-11 23:47:36 +00:00

test-repo.sh

tests: Use ${FLATPAK} not flatpak

2022-01-04 10:44:37 -08:00

test-run.sh

tests: Use ${FLATPAK} not flatpak

2022-01-04 10:44:37 -08:00

test-seccomp.sh

run: Prevent TIOCLINUX ioctl, the same as TIOCSTI

2023-03-16 09:55:31 +00:00

test-sideload.sh

tests: Fix test-sideload.sh if ostree is built with curl backend

2021-10-08 12:05:22 +02:00

test-subset.sh

tests: Add basic testing of subsets

2020-11-13 10:32:19 +01:00

test-summaries.sh

Fix test-summaries on non-x86-64

2020-11-20 09:27:17 +01:00

test-unused.sh

tests: Remove hard-coded references to x86_64

2021-03-10 10:35:18 +01:00

test-update-portal.c

portal: Define constants for the D-Bus names and path

2021-04-15 18:05:16 +02:00

test-update-portal.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-update-remote-configuration.sh

tests: Use ${FLATPAK} not flatpak

2022-01-04 10:44:37 -08:00

test-webserver.sh

tests: Redo httpd server setup

2019-10-09 14:25:44 +02:00

test-wrapper.sh

tests: Test stuff with the old (non-indexed) summary format too

2020-10-29 15:30:35 +01:00

test.filter

tests: Add tests for client-side filtering

2019-05-06 13:58:58 +00:00

test.portal.in

tests: Add simple testing portal backend and wire it up to the tests

2019-10-02 14:57:11 +02:00

testcommon.c

Reject paths given to --filesystem/--persist with special characters

2023-03-16 09:55:31 +00:00

testlib.c

portal: Add some test coverage

2021-05-25 11:11:03 +02:00

testlib.h

portal: Add some test coverage

2021-05-25 11:11:03 +02:00

testlibrary.c

Don't use app title from flatpakref as remote title

2022-01-11 11:51:02 +01:00

try-syscall.c

run: Prevent TIOCLINUX ioctl, the same as TIOCSTI

2023-03-16 09:55:31 +00:00

web-server.py

tests: web-server: fix an issue with the web server cache

2021-03-11 13:31:17 +01:00