SHA256
1
0
forked from pool/flatpak

Accepting request 1191785 from GNOME:Factory

OBS-URL: https://build.opensuse.org/request/show/1191785
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/flatpak?expand=0&rev=86
This commit is contained in:
Dominique Leuenberger 2024-08-07 04:09:49 +00:00 committed by Git OBS Bridge
commit 397f2fbc26
2 changed files with 4 additions and 4 deletions

View File

@ -178,10 +178,10 @@ Fri Mar 17 16:20:57 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
+ Escape special characters when displaying permissions and + Escape special characters when displaying permissions and
metadata, preventing malicious apps from manipulating the metadata, preventing malicious apps from manipulating the
appearance of the permissions list using crafted metadata appearance of the permissions list using crafted metadata
(CVE-2023-28101). (CVE-2023-28101, bsc#1209410).
+ If a Flatpak app is run on a Linux virtual console (tty1, tty2, + If a Flatpak app is run on a Linux virtual console (tty1, tty2,
etc.), don't allow copy/paste via the TIOCLINUX ioctl etc.), don't allow copy/paste via the TIOCLINUX ioctl
(CVE-2023-28100). Note that this is specific to virtual (CVE-2023-28100, bsc#1209411). Note that this is specific to virtual
consoles: Flatpak is not vulnerable to this if run from a consoles: Flatpak is not vulnerable to this if run from a
graphical terminal emulator such as xterm, gnome-terminal or graphical terminal emulator such as xterm, gnome-terminal or
Konsole. Konsole.

View File

@ -166,8 +166,8 @@ more information.
Summary: Add Flathub repository to system flatpak Summary: Add Flathub repository to system flatpak
Group: System/Packages Group: System/Packages
Requires: flatpak Requires: flatpak
Requires(postun): flatpak Requires(postun):flatpak
Requires(postun): sed Requires(postun):sed
%if 0%{?suse_version} > 1600 %if 0%{?suse_version} > 1600
Supplements: flatpak Supplements: flatpak
%endif %endif