diff --git a/flatpak.changes b/flatpak.changes index 379d3e0..c876aee 100644 --- a/flatpak.changes +++ b/flatpak.changes @@ -178,10 +178,10 @@ Fri Mar 17 16:20:57 UTC 2023 - Bjørn Lie + Escape special characters when displaying permissions and metadata, preventing malicious apps from manipulating the appearance of the permissions list using crafted metadata - (CVE-2023-28101). + (CVE-2023-28101, bsc#1209410). + If a Flatpak app is run on a Linux virtual console (tty1, tty2, etc.), don't allow copy/paste via the TIOCLINUX ioctl - (CVE-2023-28100). Note that this is specific to virtual + (CVE-2023-28100, bsc#1209411). Note that this is specific to virtual consoles: Flatpak is not vulnerable to this if run from a graphical terminal emulator such as xterm, gnome-terminal or Konsole. diff --git a/flatpak.spec b/flatpak.spec index a59e6da..a64c92d 100644 --- a/flatpak.spec +++ b/flatpak.spec @@ -166,8 +166,8 @@ more information. Summary: Add Flathub repository to system flatpak Group: System/Packages Requires: flatpak -Requires(postun): flatpak -Requires(postun): sed +Requires(postun):flatpak +Requires(postun):sed %if 0%{?suse_version} > 1600 Supplements: flatpak %endif