diff --git a/flatpak.changes b/flatpak.changes index 42b3483..bd20335 100644 --- a/flatpak.changes +++ b/flatpak.changes @@ -155,7 +155,7 @@ Thu Mar 28 13:05:50 UTC 2019 - Andrei Dziahel + It has been discovered that the previous fix for CVE-2017-5226, which uses seccomp to prevent sandboxed apps from using the (dangerous) TIOCSTI ioctl was only incomplete on 64bit arches. - This is now fixed. + This is now fixed (boo#1130637, gh#flatpak/flatpak#2782). + seccomp: Only compare the low 32bit of the TIOCSTI ioctl args. + Support multiple nvidia cards on the machine + Fix support for systems where XDG_RUNTIME_DIR is /var/run which