[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 4 sources · 17 days · First seen · Last updated

Flatpak security and stability updates

Overview

Flatpak has issued successive updates to address security vulnerabilities and improve system stability.

In mid-August, the release of versions 1.19 and 1.18.1 focused on critical security flaws, specifically addressing sandbox escape vulnerabilities where manipulated applications could gain unauthorized access to the host file system via symbolic links. These updates also resolved local privilege escalation risks and technical issues such as buffer overflows and path traversal vulnerabilities.

By late August, version 1.18.2 was released to provide further security hardening and stability. This maintenance update introduced GVariant validation to prevent malicious or corrupted repository metadata from causing parsing errors. It also included patches to prevent system helper crashes during parallel installations, resolved D-Bus tracking issues, and addressed file descriptor remapping collisions within the sandbox.

Entities

GLib · Flathub · Flatpak

Timeline

  1. 1 day ago

    [TECHNOLOGY] 4 sources
    Flatpak releases version 1.18.2 with security and stability fixes

    Flatpak 1.18.2 has been released, introducing security hardening for GVariant metadata validation and critical stability fixes for the system helper and sandbox handling.

  2. 17 days ago

    [TECHNOLOGY] 2 sources
    Flatpak releases security updates to address sandbox escape vulnerabilities

    Flatpak has released updates 1.18.1 and 1.19 to patch critical security vulnerabilities, including sandbox escapes and local privilege escalation flaws.

Sources

ilsoftware.it · linuxcompatible.org · linuxiac.com · michlfranken.de