Simon McVittie a9bf18040c run: Prevent TIOCLINUX ioctl, the same as TIOCSTI ...

The TIOCLINUX ioctl is only available on Linux virtual consoles such as
/dev/tty1. It has several Linux-specific functions, one of which is a
copy/paste operation which can be used for attacks similar to TIOCSTI.

This vulnerability does not affect typical graphical terminal emulators
such as xterm, gnome-terminal and Konsole, and Flatpak is primarily
designed to be run from a Wayland or X11 graphical environment, so this
is relatively unlikely to be a practical problem.

CVE-2023-28100, GHSA-7qpw-3vjv-xrqp

Resolves: https://github.com/flatpak/flatpak/security/advisories/GHSA-7qpw-3vjv-xrqp
Signed-off-by: Simon McVittie <smcv@debian.org>

2023-03-16 09:55:42 +00:00

..

test-keyring

Add make-test-bundles.sh

2016-02-25 15:27:37 +01:00

test-keyring2

tests: Add a second gpg keyring

2017-05-10 11:54:27 +02:00

can-use-fuse.c

tests: Disable revokefs if FUSE doesn't work

2021-02-09 09:33:57 +01:00

can-use-fuse.h

tests: Disable revokefs if FUSE doesn't work

2021-02-09 09:33:57 +01:00

expand-test-matrix.sh

Fix misspellings

2019-04-08 12:50:42 +00:00

flatpak.supp

tests: Add ostree ioctl valgrind suprression

2020-08-24 08:53:31 +02:00

glib.supp

tests: Add new glib suppression

2019-12-17 14:55:13 +01:00

http-utils-test-server.py

tests: Use regular HTTPServer, not ThreadingHTTPServer

2019-10-09 14:25:44 +02:00

httpcache.c

Fix a leak of SoupSession

2019-03-06 23:44:50 +00:00

libpreload.c

tests: Assert that --env= does not go in flatpak run or bwrap environ

2021-01-14 09:33:24 +01:00

libtest.sh

test-override: Assert that only the expected term is negated

2022-01-18 01:18:08 +00:00

list-unused.c

transaction: inject eol status to flatpak_dir_list_unused_refs()

2020-10-08 09:14:51 +02:00

make-multi-collection-id-repo.sh

tests: Add ability to test a branch other than master

2019-03-30 13:02:10 +00:00

make-test-app.sh

Ensure special characters in permissions and metadata are escaped

2023-03-16 09:55:42 +00:00

make-test-runtime.sh

tests: Avoid unnecessarily recreating the summary file

2020-11-17 15:20:43 +01:00

Makefile-test-matrix.am.inc

tests: Add basic test coverage for our seccomp filters

2023-03-15 12:06:14 +00:00

Makefile.am.inc

tests: Add basic test coverage for our seccomp filters

2023-03-15 12:06:14 +00:00

oci-registry-client.py

tests: Convert all tests to python3

2019-10-07 11:38:24 +02:00

oci-registry-server.py

Tests: Support HEAD requests in oci-registry-server

2020-05-04 16:32:22 +02:00

org.flatpak.Authenticator.test.service.in

tests: Add a test authenticator

2019-11-26 16:37:01 +01:00

org.freedesktop.impl.portal.desktop.test.service.in

tests: Add simple testing portal backend and wire it up to the tests

2019-10-02 14:57:11 +02:00

org.test.Hello.png

Add appdata to test apps

2016-02-25 19:03:09 +01:00

session.conf.in

Add some missing files from the tests

2016-05-02 10:46:51 +02:00

test-auth.sh

tests: Avoid unnecessarily recreating the summary file

2020-11-17 15:20:43 +01:00

test-authenticator.c

test: Return G_DBUS_METHOD_INVOCATION_HANDLED where appropriate

2020-12-09 08:34:19 +01:00

test-basic.sh

flatpak: Add --print-updated-env option to print environment

2020-12-22 14:21:54 +01:00

test-build-update-repo.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-bundle.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-completion.sh

flatpak: Add --print-updated-env option to print environment

2020-12-22 14:21:54 +01:00

test-config.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-context.c

Reject paths given to --filesystem/--persist with special characters

2023-03-16 09:55:42 +00:00

test-default-remotes.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-exports.c

test-exports: Exercise host:reset and related filesystem tokens

2022-01-18 16:36:16 +00:00

test-extensions.sh

tests: Avoid unnecessarily recreating the summary file

2020-11-17 15:20:43 +01:00

test-history.sh

test-history.sh: Fix flakiness by moving sleep

2022-02-08 18:57:25 +00:00

test-http-utils.sh

Merge pull request #3476 from alexlarsson/drop-p2p

2020-03-25 09:54:41 +01:00

test-info.sh

Ensure special characters in permissions and metadata are escaped

2023-03-16 09:55:42 +00:00

test-metadata-validation.sh

test-metadata-validation.sh: Ensure that mtimes change between iterations

2022-01-12 13:58:17 -08:00

test-oci-registry.sh

test-oci-registry.sh: Fix filename in assertion

2020-06-22 11:05:53 +02:00

test-oci.sh

tests: Remove hard-coded references to x86_64

2021-06-17 09:39:37 +01:00

test-override.sh

test-override: Exercise --nofilesystem=host:reset

2022-01-18 16:36:16 +00:00

test-portal-impl.c

tests: Use g_assert_true() not g_assert()

2020-08-17 09:21:30 +02:00

test-repo.sh

tests: Un-redirect url after trying redirect

2020-11-17 15:20:43 +01:00

test-run.sh

tests: Don't reset XDG_RUNTIME_DIR locally

2021-08-27 11:38:22 +01:00

test-seccomp.sh

run: Prevent TIOCLINUX ioctl, the same as TIOCSTI

2023-03-16 09:55:42 +00:00

test-sideload.sh

tests: Fix test-sideload.sh if ostree is built with curl backend

2021-10-08 12:33:27 +02:00

test-subset.sh

tests: Add basic testing of subsets

2020-11-13 10:32:19 +01:00

test-summaries.sh

Fix test-summaries on non-x86-64

2020-11-20 09:27:17 +01:00

test-unused.sh

tests: Remove hard-coded references to x86_64

2021-06-17 09:39:37 +01:00

test-update-portal.c

Drop more collection_id use

2020-03-23 17:58:04 +01:00

test-update-portal.sh

tests: Add and use "ok" helper

2020-03-20 15:37:10 +01:00

test-update-remote-configuration.sh

tests: Avoid unnecessarily recreating the summary file

2020-11-17 15:20:43 +01:00

test-webserver.sh

tests: Redo httpd server setup

2019-10-09 14:25:44 +02:00

test-wrapper.sh

tests: Test stuff with the old (non-indexed) summary format too

2020-10-29 15:30:35 +01:00

test.filter

tests: Add tests for client-side filtering

2019-05-06 13:58:58 +00:00

test.portal.in

tests: Add simple testing portal backend and wire it up to the tests

2019-10-02 14:57:11 +02:00

testcommon.c

Reject paths given to --filesystem/--persist with special characters

2023-03-16 09:55:42 +00:00

testlibrary.c

testlibrary: Fix memory leaks

2021-02-19 09:16:10 +01:00

try-syscall.c

run: Prevent TIOCLINUX ioctl, the same as TIOCSTI

2023-03-16 09:55:42 +00:00

web-server.py

tests: Use regular HTTPServer, not ThreadingHTTPServer

2019-10-09 14:25:44 +02:00