Format: 1.8 Date: Sat, 28 Jan 2017 06:00:41 -0500 Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: ppc64el Version: 0.6.11-1ubuntu0.16.10.0 Distribution: yakkety Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Jeremy Bicha Description: flatpak - Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) libflatpak0 - Application deployment framework for desktop apps (library) Launchpad-Bugs-Fixed: 1657357 Changes: flatpak (0.6.11-1ubuntu0.16.10.0) yakkety-security; urgency=medium . * SECURITY UPDATE: bubblewrap escape via TIOCSTI ioctl (LP: #1657357) - Fixed in d/p/Use-seccomp-to-filter-out-TIOCSTI-ioctl.patch: Add patch from upstream 0.8.1 to prevent contained apps from using TIOCSTI ioctl. This would let the app inject commands into the terminal from which it was invoked. Prevent the attack here by using seccomp to filter out TIOCSTI ioctl. - CVE-2017-5226 * SECURITY UPDATE: Prevent writing to per-user installed fonts and Flatpak extensions (typically locales) - Fixed in d/p/Make-sure-all-mounted-sources-are-read-only.patch: Add patch from upstream 0.8.2 Checksums-Sha1: 281ada3a46e3343ef44e201400ea2c3a924c4fa5 459308 flatpak-builder-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 7204a05c465bf87cf80e271bba69dbfbac62770e 138854 flatpak-builder_0.6.11-1ubuntu0.16.10.0_ppc64el.deb b4dab58fab105a6b9c2020c313f5f8e232003332 1183632 flatpak-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 17c133d2bc6c5a6255018cff476695223f433d52 124526 flatpak-tests-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 1b46e0a075b04cc7ed9c020db4b2050d07b08533 75652 flatpak-tests_0.6.11-1ubuntu0.16.10.0_ppc64el.deb 9feebcfa25b42d6dde9958ef3aa9ec487e4690f4 419490 flatpak_0.6.11-1ubuntu0.16.10.0_ppc64el.deb 0c8afd5935ba0320e0ce51d4d1a8f4b8be83ee9f 5398 gir1.2-flatpak-1.0_0.6.11-1ubuntu0.16.10.0_ppc64el.deb ff33bae359657eee3e7f4f05b6b7c657f21de317 16232 libflatpak-dev_0.6.11-1ubuntu0.16.10.0_ppc64el.deb 4b91fd76a0004c6900ff137bfafa8735582815e2 397076 libflatpak0-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb ccb2e4a4c755972815f7fb851af00df5f6e100aa 118170 libflatpak0_0.6.11-1ubuntu0.16.10.0_ppc64el.deb Checksums-Sha256: b5db267e8a782359294e7815b1cb735dd10e8c25454cc2f698f4254ed7a86d51 459308 flatpak-builder-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 02ee9e5a67dc51859e8a54c6303c1c5ac409ff163e129edd24a7e052fea5de61 138854 flatpak-builder_0.6.11-1ubuntu0.16.10.0_ppc64el.deb a034a8f390a0f351b423fe5debf5c852fe272b6a10be900f15a5e9ee7a599212 1183632 flatpak-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb b9f9e094b73d9f6d9413aa3c4e887f059606ca669eac1b393309856818427605 124526 flatpak-tests-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 2e42cee792fe846b72aec6fd5ce44b68d6e6671c83c9a42b03adb4a5b28dd736 75652 flatpak-tests_0.6.11-1ubuntu0.16.10.0_ppc64el.deb d4471cb3277c8115b8dd9c816d56524ea2243049f27504a7dd5c681710c57890 419490 flatpak_0.6.11-1ubuntu0.16.10.0_ppc64el.deb 44a8255857ee3e1b1abab717b7bc2b5a6be61c3df40ab83a41b7ad2f5cdd8a32 5398 gir1.2-flatpak-1.0_0.6.11-1ubuntu0.16.10.0_ppc64el.deb 0ee28e06d061e94c798da93f631403240474a35ec42abfa30df142d8e6fff3ec 16232 libflatpak-dev_0.6.11-1ubuntu0.16.10.0_ppc64el.deb c6a3fbdf81d94c8c441a0aae7fdd3c1ce9acb22f31823403d8885e9cba803c77 397076 libflatpak0-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 3df6fb3ca6ab0d2eb217a134824ef1d8150e09238cbaf20d3fb51285936862f3 118170 libflatpak0_0.6.11-1ubuntu0.16.10.0_ppc64el.deb Files: 674cf9dff6604c639770d95ea6d81922 459308 devel extra flatpak-builder-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 5b9df0701a5161715853043f3db5b0b8 138854 devel optional flatpak-builder_0.6.11-1ubuntu0.16.10.0_ppc64el.deb d53659791e60613f43f70d0e88e96c8c 1183632 admin extra flatpak-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 44d3668215d4606544b45ed9e6f190b7 124526 misc extra flatpak-tests-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 6a37ef6427a325a8b5a4ed0abd3416ce 75652 misc optional flatpak-tests_0.6.11-1ubuntu0.16.10.0_ppc64el.deb bb5b6c8a044b0e56388c3cc3d9ca53f6 419490 admin optional flatpak_0.6.11-1ubuntu0.16.10.0_ppc64el.deb 1f6563df871050022d9bcfd9ede48967 5398 introspection optional gir1.2-flatpak-1.0_0.6.11-1ubuntu0.16.10.0_ppc64el.deb 918af8b92247ae2d118088804a346f9b 16232 libdevel optional libflatpak-dev_0.6.11-1ubuntu0.16.10.0_ppc64el.deb a3ddd02bc943a7e0aba7daec23cd1fcd 397076 libs extra libflatpak0-dbgsym_0.6.11-1ubuntu0.16.10.0_ppc64el.ddeb 18747237b988b310853bdce123500629 118170 libs optional libflatpak0_0.6.11-1ubuntu0.16.10.0_ppc64el.deb Original-Maintainer: Utopia Maintenance Team