Announce: Flatpak 1.10.3 (maintenance release)

Simon McVittie smcv at collabora.com
Tue Aug 31 19:25:45 UTC 2021


Available here:
   https://github.com/flatpak/flatpak/releases/tag/1.10.3

$ sha256sum -b flatpak-1.10.3.tar.xz
12723ad250997b5a28bef92ae632b097f50b0819feeb25ef8887fe8ec9b63b46 *flatpak-1.10.3.tar.xz

This is a maintenance update with various bug fixes backported from 1.11.x.

* Don't inherit an unusual $XDG_RUNTIME_DIR setting into the sandbox,
  fixing a regression introduced when CVE-2021-21261 was fixed in 1.8.5
  and 1.10.0
* Fix various memory and file descriptor leaks, in particular with
  flatpak-spawn --env=...
* Fix fd confusion in flatpak-spawn --env=... --forward-fd=..., resolving
  a regression introduced in 1.8.5 and 1.10.0
* Fix deploys of local remotes in system-helper, possibly involving newer
  GLib versions
* Fix test failures on non-x86_64 systems
* create-usb: Skip copying extra-data flatpaks
* Improve test coverage on Debian derivatives by ensuring /sbin is in
  tests' PATH

-- 
Simon McVittie, Collabora Ltd.
on behalf of the Flatpak maintainers


More information about the Flatpak mailing list