1.19.0

Security fixes:

• Fix sandbox escape with full host filesystem read/write access via symlink
  attack on app data directories (GHSA-8688-9x26-hhxj)

• Fix local root privilege escalation via revokefs symlink path traversal and
  commit tampering (GHSA-qrwq-7qwx-q9rp)

• Fix arbitrary root write via symlink and path traversal in extra-data
  extraction (GHSA-fqx6-vh4p-42cg)

• Fix arbitrary root write via path traversal in flatpak build-init
  (GHSA-8qxj-x646-phcm)

• Fix arbitrary host file read via hardlink path traversal in OCI archive
  extraction (GHSA-9rww-v4mm-x4jg)

• Fix path traversal via unvalidated architecture parameter in DeployAppstream
  (GHSA-v2gw-v9h5-9q4x)

• Fix buffer overflow in OCI delta stream path names on 32-bit systems
  (GHSA-jr92-2v97-wgvc)

• Fix fixed-filename writes to arbitrary locations via symlink attack on .ld.so
  (GHSA-99wv-m8rp-g58x)

• Fix extension metadata path traversal allowing host filesystem probing and
  unintended mount locations (GHSA-w69g-9x8j-7p8f)

• Fix anti-downgrade bypass allowing unprivileged users to downgrade system
  apps (GHSA-q4gr-vc25-57m5)

Enhancements:

• Allow system-wide downgrades through the system helper, authenticated via
  new polkit actions instead of requiring root (#6669)

• Add flatpak-coredumpctl list subcommand and Bash completion for
  flatpak-coredumpctl (#6705, #6678, #6677)

• Add flatpak_transaction_progress_get_bytes_per_second() to the library API
  (#6679)

• Lock the session helper's runtime directory to prevent systemd-tmpfiles from
  cleaning the p11-kit socket (#6754)

• Check OCI signatures from the mirrored repo in the system helper instead of
  fetching them from the lookaside server (#6682)

• Cleanup of Bash completion (#6710)

• Translation updates: pt_BR (#6701, #6751), sl (#6726), sv (#6750), uk
  (#6715), zh_CN (#6748)

Bug fixes:

• Fix portal flatpak-spawn environment handling regression (#6721)

• Don't set no_interaction for --assumeyes, so that credential and polkit
  prompts still work (#6744)

• Fix the inverted behavior of --clear-env (#6722)

• Fix negated permission strings for allow and share run options (#6684, #6687)

• Error out if file forwarding of empty paths is attempted (#6693)

• Fix build failure when exporting metainfo releases.xml files (#6698)

• Fix crashes in the portal update monitor (#6692) and OCI JSON handling
  (#6704)

• Fix GI annotation for flatpak_instance_get_all (#6696)

• Apply TLS certs to OCI registry requests and propagate stream write failures
  to curl (#6685)

• Harden the system helper by validating remote names, dropping supplementary
  groups, and not logging credentials (#6722, #6724)

• Numerous fixes for crashes, memory leaks, integer overflows, and error
  handling (#6722, #6724, #6723, #6713, #6725)

• Test, CI, and documentation improvements (#6681, #6742, #6711, #6712, #6752,
  #6755)

1.18.1

Security fixes:

• Fix sandbox escape with full host filesystem read/write access via symlink
  attack on app data directories (GHSA-8688-9x26-hhxj)

• Fix local root privilege escalation via revokefs symlink path traversal and
  commit tampering (GHSA-qrwq-7qwx-q9rp)

• Fix arbitrary root write via symlink and path traversal in extra-data
  extraction (GHSA-fqx6-vh4p-42cg)

• Fix arbitrary root write via path traversal in flatpak build-init
  (GHSA-8qxj-x646-phcm)

• Fix arbitrary host file read via hardlink path traversal in OCI archive
  extraction (GHSA-9rww-v4mm-x4jg)

• Fix path traversal via unvalidated architecture parameter in DeployAppstream
  (GHSA-v2gw-v9h5-9q4x)

• Fix buffer overflow in OCI delta stream path names on 32-bit systems
  (GHSA-jr92-2v97-wgvc)

• Fix fixed-filename writes to arbitrary locations via symlink attack on .ld.so
  (GHSA-99wv-m8rp-g58x)

• Fix extension metadata path traversal allowing host filesystem probing and
  unintended mount locations (GHSA-w69g-9x8j-7p8f)

• Fix anti-downgrade bypass allowing unprivileged users to downgrade system
  apps (GHSA-q4gr-vc25-57m5)

Bug fixes:

• Fix portal flatpak-spawn environment handling regression (#6721)

• Fix negated permission strings for allow and share run options (#6684)

• Fix build failure when exporting metainfo releases.xml files (#6698)

• Fix crashes in the portal update monitor (#6692) and OCI JSON handling
  (#6704)

• Error out if file forwarding of empty paths is attempted (#6693)

• Check OCI signatures from the mirrored repo in the system helper instead of
  fetching from the lookaside server (#6682)

• Apply TLS certs to OCI registry requests and propagate stream write failures
  to curl (#6685)

• Fix GI annotation for flatpak_instance_get_all (#6696)

• Cleanup of Bash completion (#6710)

• Numerous internal fixes for crashes, error handling, and hardening (#6723,
  #6725)

1.18.0

Enhancements:

• Improve error handling and printed output of flatpak-coredumpctl (#6649,
  #6680)

• Support the AMD vendor specific compute interface (/dev/kfd) via the DRI
  device permission (#6648)

• Improve the output of flatpak update with failure causes (#6657)

• Improve startup time for fish shell integration (#6635)

• Translation updates: ‎zh_CN (#6671)

Bug fixes:

• Fix building when HAVE_LIBSYSTEMD but not USE_SYSTEM_HELPER is defined (#6652)

• Ignore system bus failures in parental controls check (#6663)

• Fix some return values and replace deprecated GTimeVal with
  g_get_real_time() (#6646)

• Suppress an unused-result warning in the tests (#6655)

1.17.7

Enhancements:

• Add the new permission conditionals has-usb-device and has-usb-portal to
  allow apps to drop --device=all and --device=usb permissions (#6560)

• Always send the Flatpak-Upgrade-From header when updating instead of
  freshly installing, to improve the quality of statistics (#6626)

• Improve how the absence of the system repo is handled (#6621)

• Changes to repos are now more atomic which helps to avoid them being in an
  invalid state. This could be observed when importing the GPG key failed,
  because the system clock was wrong. (#6547)

• A function to report the age of the configuration was added to libflatpak,
  which will help GNOME Software to prevent unnecessary work (#6532)

• Improvements to the build system (#6614, #6610)

• Improve various tests (#6604, #6606, #6619, #6617, #6605, #6625)

• Translation updates: tr (#6629), ‎zh_CN (#6630)

Bug fixes:

• Fix a regression in handling of the fallback-x11 permission, which was
  affecting overrides from Flatseal (#6632)

• Fix a memory leak in the Flatpak portal (#6613)

• Install SELinux configuration files to the right directory (#6622)

• Silence wrong lseek() errors when creating sub-sandboxes (#6609)

1.17.6

Bug fixes:

• Fix the remaining regression for Chromium based browsers by not leaking file
  descriptors down to wrapped command (#6589, #6594)

• Fix a regression when installing extra-data without a runtime, which is the
  case for openh264 (#6587)

• Fix the remaining regression for Epiphany by ignoring unusable sandbox-expose
  paths for sub-sandboxes in the portal (#6588)

• Fix the installed tests by allowing to add a new ref to an existing temporary
  ostree repo (#6592)

• Avoid closing fds 0/1/2 when they are used as a bad argument to flatpak-run,
  and reduce duplication in handling file descriptor arguments (#6598)

Enhancements:

• Disable auto-pin in flatpak-repair to preserve the pin state across
  re-installs (#6571)

• Small improvements for the tests (#6596, #6595, #6597)

1.16.6

Bug fixes:

• Fix the remaining regression for Chromium based browsers by not leaking file
  descriptors down to wrapped command (#6589, #6594)

• Fix a regression when installing extra-data without a runtime, which is the
  case for openh264 (#6587)

• Fix the remaining regression for Epiphany by ignoring unusable sandbox-expose
  paths for sub-sandboxes in the portal (#6588)

• Fix the installed tests by allowing to add a new ref to an existing temporary
  ostree repo (#6592)

• Avoid closing fds 0/1/2 when they are used as a bad argument to flatpak-run,
  and reduce duplication in handling file descriptor arguments (#6598)

---

1e63e7f3fe44b602f34d92a6fe46fd8a3bc6be9460c03c2681e57976c658eec3 *flatpak-1.16.6.tar.xz

1.17.5

Bug fixes:

• Fix regressions caused by the sandbox escape security fix, which impact some
  browsers, browser-based apps and Steam (#6577, #6569, #6576, #6574)

Enhancements:

• Expand test coverage of flatpak-run features used by flatpak-portal (#6573)

1.17.4

Security fixes:

• Fix a complete sandbox escape which leads to host file access and code
  execution in the host context (CVE-2026-34078)

• Prevent arbitrary file deletion on the host filesystem (CVE-2026-34079)

• Prevent arbitrary read-access to files in the system-helper context
  (GHSA-2fxp-43j9-pwvc)

• Prevent orphaning cross-user pull operations (GHSA-89xm-3m96-w3jg)

Enhancements:

• Enable ntsync unconditionally (#6546)

• Automatic branch following for extensions to ensure that "no-autodownload"
  extensions stay functional after an update that requires a new branch (#6550)

• Translation updates: eo (#6538), kk (#6553), sr (#6537), zh_CN (#6534)

Bug fixes:

• Prevent CPR sequence from showing up in the terminal (#6549)

• Fix a crash for apps/runtimes with multiarch permission (#6535)

• Fixes for Coverity warnings (#4932)

• Add test-preinstall.sh to the test matrix source (#6551)

• Fix a test message to refer to "systemd-localed" instead of "located" (#6536)

1.16.5

Bug fixes:

• Fix regressions caused by the sandbox escape security fix, which impact some
  browsers, browser-based apps and Steam (#6577, #6569, #6576, #6574)

Enhancements:

• Expand test coverage of flatpak-run features used by flatpak-portal (#6573)

---

a320e9581649766c264a97304b1563c3d04d87dcc1115427860b658083cbc156 *flatpak-1.16.5.tar.xz

1.16.4

Security fixes:

• Fix a complete sandbox escape which leads to host file access and code
  execution in the host context (CVE-2026-34078)

• Prevent arbitrary file deletion on the host filesystem (CVE-2026-34079)

• Prevent arbitrary read-access to files in the system-helper context
  (GHSA-2fxp-43j9-pwvc)

• Prevent orphaning cross-user pull operations (GHSA-89xm-3m96-w3jg)

---

761ff3ba00c99a26f914c6999e90b12a54cab19cea5888413f17e46ee618d8fe *flatpak-1.16.4.tar.xz