Skip to content

Release 0.10.3

Compare
Choose a tag to compare
@alexlarsson alexlarsson released this 30 Jan 13:36
0.10.3

Major changes in 0.10.3

This is a security fix release that fixes a sandbox escape in the
flatpak dbus proxy. This issue was found by Gabriel Campana of The
Google Security Team.

  • Fix dbus proxy vulnerability in authentication phase
  • Make permission handling ignore unknown permissions for forwards
    compatibility
  • Removed incorrect error message in update --appdata when ther
    was no updates
  • Fix handling of abort in the duplicate remote prompt
  • Fix division by zero in progress calculation
  • Fix flatpak remote-info --show-metadata
$ sha256sum flatpak-0.10.3.tar.xz 
d08616cfa7f0e0a5f0234a9859b67450e35377b95929b118a1b7ca7497e91b00  flatpak-0.10.3.tar.xz