Format: 1.8 Date: Tue, 19 Jan 2021 14:21:40 +0000 Source: flatpak Binary: flatpak flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: arm64 Version: 1.0.9-0ubuntu0.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Paulo Flabiano Smorigo Description: flatpak - Application deployment framework for desktop apps flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) libflatpak0 - Application deployment framework for desktop apps (library) Launchpad-Bugs-Fixed: 1911473 Changes: flatpak (1.0.9-0ubuntu0.2) bionic-security; urgency=medium . * SECURITY UPDATE: Flatpak sandbox escape via spawn portal (LP: #1911473) - debian/patches/CVE-2021-21261-1.patch: run: Convert all environment variables into bwrap arguments. - debian/patches/CVE-2021-21261-2.patch: common: Move flatpak_buffer_to_sealed_memfd_or_tmpfile to its own file. - debian/patches/CVE-2021-21261-3.patch: context: Add --env-fd option. - debian/patches/CVE-2021-21261-4.patch: portal: Convert --env in extra-args into --env-fd. - debian/patches/CVE-2021-21261-5.patch: portal: Do not use caller-supplied variables in environment. - CVE-2021-21261 Checksums-Sha1: 78eb6c2eea771dde3616d1680d9122b124af9e4a 2913232 flatpak-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb c55e4268d8e132d624ed73eb01f08c2b14a47bd8 795132 flatpak-tests-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb 4b09aec62d932c5391b18cb2f3c71c77e4d0326c 210912 flatpak-tests_1.0.9-0ubuntu0.2_arm64.deb c4cbfc86bd3ed50b6e70f52fc1b7dbd9d29fdb8c 14607 flatpak_1.0.9-0ubuntu0.2_arm64.buildinfo 24bce17681c3d2008c8876cfb1927fa7540e268f 669216 flatpak_1.0.9-0ubuntu0.2_arm64.deb 3791828faa28f875fa7ec248162c12035b2635f9 9812 gir1.2-flatpak-1.0_1.0.9-0ubuntu0.2_arm64.deb b2b009b8a1ab8167dda92553671946569157724f 27276 libflatpak-dev_1.0.9-0ubuntu0.2_arm64.deb 7ab5015a82958b3ba9f9dcfa201f348703c96216 885808 libflatpak0-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb 1ff5b0f0a822d8512e50b54a8a0654f99b4a12b3 185140 libflatpak0_1.0.9-0ubuntu0.2_arm64.deb Checksums-Sha256: 619018f4c046839daf82fb6fd431926a924d7381032a471243f7cce357dcbf1b 2913232 flatpak-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb dc5b37602b1f286fa91c3de2107d2fa83c93fa2d61544b02e2c5b45d61ad8c4a 795132 flatpak-tests-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb 19a9c228e91d77b6558ecb5e9aff3be120ff3f81d348632e0ae291460c27d661 210912 flatpak-tests_1.0.9-0ubuntu0.2_arm64.deb b964f315b889dcf97e4c13d7183eec400977d6ea159ffa9f364333305fc1649b 14607 flatpak_1.0.9-0ubuntu0.2_arm64.buildinfo a03f9e6968ac1275fab203a62fdb314e0405d9e7b8858510495022c91dd9ccde 669216 flatpak_1.0.9-0ubuntu0.2_arm64.deb acc1f55dc130bfb359c96f781c28fe7c0db77cac4ad4a2434ccd723bcc4bd211 9812 gir1.2-flatpak-1.0_1.0.9-0ubuntu0.2_arm64.deb d3167889bd61243657fda18145113e80575883ec1e4ed6a93caf33066cee8f02 27276 libflatpak-dev_1.0.9-0ubuntu0.2_arm64.deb 8b47d3b9342038c1d02a7d6bcb4c1202fafc2c065aa1727ab7a6e310759cfc86 885808 libflatpak0-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb ef7830df6dfcd24bad23e0185d63b3521052db6d9ae93e460ba0665cbbd404dc 185140 libflatpak0_1.0.9-0ubuntu0.2_arm64.deb Files: ce1afe77634663d59328d95baf01cc84 2913232 debug optional flatpak-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb 1ed658c46586b446aa92f7dcb4bfbcec 795132 debug optional flatpak-tests-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb bc7cc3d46bd60d019e17a007c43d9b00 210912 misc optional flatpak-tests_1.0.9-0ubuntu0.2_arm64.deb d435f0f4e3bdbfd975be5c0e8f21a0b1 14607 admin optional flatpak_1.0.9-0ubuntu0.2_arm64.buildinfo 45e4e9e752fa1c7612b9afd9a6efe2bd 669216 admin optional flatpak_1.0.9-0ubuntu0.2_arm64.deb 6d2591898a53716dacc353830e2b6e0e 9812 introspection optional gir1.2-flatpak-1.0_1.0.9-0ubuntu0.2_arm64.deb 9aea50c8f43cd82c0ceb15244722435e 27276 libdevel optional libflatpak-dev_1.0.9-0ubuntu0.2_arm64.deb 8a2852c8e2347d6c82be134d5f25ba33 885808 debug optional libflatpak0-dbgsym_1.0.9-0ubuntu0.2_arm64.ddeb 174b285b66f8227735b6e6bf42d9989e 185140 libs optional libflatpak0_1.0.9-0ubuntu0.2_arm64.deb Original-Maintainer: Utopia Maintenance Team