Format: 1.8 Date: Sat, 28 Jan 2017 06:00:41 -0500 Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: i386 Version: 0.6.11-1ubuntu0.16.10.0 Distribution: yakkety Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jeremy Bicha Description: flatpak - Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) libflatpak0 - Application deployment framework for desktop apps (library) Launchpad-Bugs-Fixed: 1657357 Changes: flatpak (0.6.11-1ubuntu0.16.10.0) yakkety-security; urgency=medium . * SECURITY UPDATE: bubblewrap escape via TIOCSTI ioctl (LP: #1657357) - Fixed in d/p/Use-seccomp-to-filter-out-TIOCSTI-ioctl.patch: Add patch from upstream 0.8.1 to prevent contained apps from using TIOCSTI ioctl. This would let the app inject commands into the terminal from which it was invoked. Prevent the attack here by using seccomp to filter out TIOCSTI ioctl. - CVE-2017-5226 * SECURITY UPDATE: Prevent writing to per-user installed fonts and Flatpak extensions (typically locales) - Fixed in d/p/Make-sure-all-mounted-sources-are-read-only.patch: Add patch from upstream 0.8.2 Checksums-Sha1: 29054a7c1b3b3bbb0b5c4ac577e0c63291398ec4 335278 flatpak-builder-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb 126441b03c3824bb3ad621bfc86e7e3b845a6a8a 160152 flatpak-builder_0.6.11-1ubuntu0.16.10.0_i386.deb 21c1b305946938d5d95ccdf52f33eafa6ec38703 863110 flatpak-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb ea8397b613e792cfcaeb67abceb0c6efdb4b924f 97388 flatpak-tests-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb d67a62355a9e76e41656e494d091b43b3ac9b480 78812 flatpak-tests_0.6.11-1ubuntu0.16.10.0_i386.deb b96d9e952310c7e667ba13e71b84946ef5fcf06b 442034 flatpak_0.6.11-1ubuntu0.16.10.0_i386.deb 75c9d2f06594336c34e9185347b0ad126010320a 5396 gir1.2-flatpak-1.0_0.6.11-1ubuntu0.16.10.0_i386.deb 25a4f001908bb96c72a90459de8ded7ca8bab45f 16212 libflatpak-dev_0.6.11-1ubuntu0.16.10.0_i386.deb 932dbc7d5ee7890a204f719eead8388fc2525daa 287162 libflatpak0-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb 85d7e2e8dc357e6038ff1ea23d7a563a24e37386 134830 libflatpak0_0.6.11-1ubuntu0.16.10.0_i386.deb Checksums-Sha256: 313c5b70c8ef9143ad4e19bc24e72c791d0125ca7ed4f3b7388aeed68a9b430b 335278 flatpak-builder-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb 3d11b30c5eca3e7b0fc18aa0d08781526626ab2dbf59f2fbbd9f6e4ebb724a88 160152 flatpak-builder_0.6.11-1ubuntu0.16.10.0_i386.deb 65fd7d83ae26f34b84304907f712e6586f84f17e081efd98b9e0e428280441f9 863110 flatpak-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb bba99b44492ee56d924ca5692926f532eb6d9859bb28747d3c687481b14d4b4a 97388 flatpak-tests-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb cb006f136a2b8c6775dd14c5db9a39ab2fb1ea2451fe0e796418a684eac5be90 78812 flatpak-tests_0.6.11-1ubuntu0.16.10.0_i386.deb 021f4d33198351c694d76ff1c12d28aa1f9a08743d5787d85fef174a60bde624 442034 flatpak_0.6.11-1ubuntu0.16.10.0_i386.deb a61f67f62a1d8bc508d135ef1b0ee665d30ec717af0ab7496c318bdf6f91a163 5396 gir1.2-flatpak-1.0_0.6.11-1ubuntu0.16.10.0_i386.deb 893d9c52d3151178deb69ca0bb783ab554c65c2911a42bd37020d98b1f1f59ae 16212 libflatpak-dev_0.6.11-1ubuntu0.16.10.0_i386.deb 9857b2206c5800cb8f2641888321425dc2fee54e73892cf98974fc3a213f3206 287162 libflatpak0-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb e5de1e8b4da9dab973322b4ccae3a052e00c70bf6149f4b82909e76dd974d501 134830 libflatpak0_0.6.11-1ubuntu0.16.10.0_i386.deb Files: 7f169f295bb0a7973e3feee636ef1f2c 335278 devel extra flatpak-builder-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb 32e439f0aa581e82b272cdb9ead5d351 160152 devel optional flatpak-builder_0.6.11-1ubuntu0.16.10.0_i386.deb c7f6e77ca3857ad47f07144464b593e1 863110 admin extra flatpak-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb 91c4dd7cb96f48fd8e65652132190618 97388 misc extra flatpak-tests-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb 0458ceee209cf3c21a50e5f910d90230 78812 misc optional flatpak-tests_0.6.11-1ubuntu0.16.10.0_i386.deb 7c15d03c0142bfad25bdb89c59ab60ea 442034 admin optional flatpak_0.6.11-1ubuntu0.16.10.0_i386.deb 547505de68de4ef42a48d90fafd221ee 5396 introspection optional gir1.2-flatpak-1.0_0.6.11-1ubuntu0.16.10.0_i386.deb 23afd73fc6a98a36e07bc76a792d24cc 16212 libdevel optional libflatpak-dev_0.6.11-1ubuntu0.16.10.0_i386.deb 19e9534690637ee144c213a7794c86f9 287162 libs extra libflatpak0-dbgsym_0.6.11-1ubuntu0.16.10.0_i386.ddeb 40d8145f05c8024abfd12b29f124e76f 134830 libs optional libflatpak0_0.6.11-1ubuntu0.16.10.0_i386.deb Original-Maintainer: Utopia Maintenance Team