Announce: Flatpak 1.6.1

Alexander Larsson alexl at redhat.com
Thu Jan 23 13:04:43 UTC 2020


Available here:
  https://github.com/flatpak/flatpak/releases/tag/1.6.1

$ sha256sum flatpak-1.6.1.tar.xz
fc38a3a24d249c07c2a45c58fab95d8e5b060bc1b8204da00d5843adba807ff4
flatpak-1.6.1.tar.xz

Changes in 1.6.1
================

This is a (mild) security update. Flatpak 1.6.0 added the ability for
an application to request it to be
updated, as long as the new version doesn't require new permissions.
Unfortunately in some special cases,
if an app had access to the home directory, but not the rest of the
filesystem it would still allow a
self-update where the new version could access some files outside the
home directory..

This is fixed in this version, and all users of 1.6.0 are recommended to update.

Other changes are:

 * New permission --device=shm giving access to host /dev/shm, as
needed for jack.
 * Generated correct download size in build-commit-from
 * sub-sandbox now allows the child to share the gpu of the caller has
full device access
 * Fix crash with disabled remotes
 * Fix builds with older versions of glib
 * Update translations


-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Alexander Larsson                                Red Hat, Inc
       alexl at redhat.com         alexander.larsson at gmail.com



More information about the Flatpak mailing list