Accepting request 1072671 from home:AndreasStieger:branches:GNOME:Factory

bugzilla references

OBS-URL: https://build.opensuse.org/request/show/1072671
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=183
This commit is contained in:
Bjørn Lie 2023-03-17 15:42:54 +00:00 committed by Git OBS Bridge
parent e77f94829d
commit 6966718bf0

View File

@ -5,13 +5,13 @@ Thu Mar 16 16:15:42 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
+ Escape special characters when displaying permissions and
metadata, preventing malicious apps from manipulating the
appearance of the permissions list using crafted metadata
(CVE-2023-28101).
(CVE-2023-28101, boo#1209410).
+ If a Flatpak app is run on a Linux virtual console (tty1, tty2,
etc.), don't allow copy/paste via the TIOCLINUX ioctl
(CVE-2023-28100). Note that this is specific to virtual
consoles: Flatpak is not vulnerable to this if run from a
graphical terminal emulator such as xterm, gnome-terminal or
Konsole.
Konsole. (boo#1209411)
+ Updated translations.
-------------------------------------------------------------------