flatpak 1.8.2-1ubuntu0.2 source package in Ubuntu
Changelog
flatpak (1.8.2-1ubuntu0.2) groovy-security; urgency=medium
* SECURITY UPDATE: Flatpak sandbox escape via crafted .desktop file
(LP: #1918482)
- debian/patches/CVE-2021-21381-1.patch: Disallow @@ and @@u usage in
desktop files.
- debian/patches/CVE-2021-21381-2.patch: dir: Reserve the whole @@
prefix.
- debian/patches/CVE-2021-21381-3.patch: dir: Refuse to export
.desktop files with suspicious uses.
- CVE-2021-21381
-- Andrew Hayzen <email address hidden> Wed, 10 Mar 2021 20:54:38 +0000
Upload details
- Uploaded by:
- Andrew Hayzen
- Sponsored by:
- Steve Beattie
- Uploaded to:
- Groovy
- Original maintainer:
- Ubuntu Developers
- Architectures:
- linux-any all
- Section:
- admin
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| flatpak_1.8.2.orig.tar.xz | 1.4 MiB | 7926625df7c2282a5ee1a8b3c317af53d40a663b1bc6b18a2dc8747e265085b0 |
| flatpak_1.8.2-1ubuntu0.2.debian.tar.xz | 36.6 KiB | 529557d523c9f4d351b552e63b88055888d667e991c0f1540cb09e054e04ab7c |
| flatpak_1.8.2-1ubuntu0.2.dsc | 3.5 KiB | 6458f34804ec002f8dd6d307d37f7cda4a712c7c72bf7a1f9eed1c7ccaf0cb8d |
Available diffs
Binary packages built by this source
- flatpak: No summary available for flatpak in ubuntu groovy.
No description available for flatpak in ubuntu groovy.
- flatpak-dbgsym: No summary available for flatpak-dbgsym in ubuntu groovy.
No description available for flatpak-dbgsym in ubuntu groovy.
- flatpak-tests: No summary available for flatpak-tests in ubuntu groovy.
No description available for flatpak-tests in ubuntu groovy.
- flatpak-tests-dbgsym: No summary available for flatpak-tests-dbgsym in ubuntu groovy.
No description available for flatpak-
tests-dbgsym in ubuntu groovy.
- gir1.2-flatpak-1.0: No summary available for gir1.2-flatpak-1.0 in ubuntu groovy.
No description available for gir1.2-flatpak-1.0 in ubuntu groovy.
- libflatpak-dev: No summary available for libflatpak-dev in ubuntu groovy.
No description available for libflatpak-dev in ubuntu groovy.
- libflatpak-doc: No summary available for libflatpak-doc in ubuntu groovy.
No description available for libflatpak-doc in ubuntu groovy.
- libflatpak0: No summary available for libflatpak0 in ubuntu groovy.
No description available for libflatpak0 in ubuntu groovy.
- libflatpak0-dbgsym: No summary available for libflatpak0-dbgsym in ubuntu groovy.
No description available for libflatpak0-dbgsym in ubuntu groovy.
