Flatpak is currently 1.16.6 in the resolute repo. Here at Releases · flatpak/flatpak · GitHub, multiple security fixes are present in the latest two releases. Could we update this package to address them? I use a mix of snaps and flatpak applications, as not all software is available or at the same version for each. Thanks for your time!
1 Like
This needs to be filed as a security bug on Launchpad. It won’t get any work from here. Thanks! ubuntu-bug flatpak to start that process.
3 Likes
I’ve been using flatpak’s official repo for years. I suggest that you use it, because the Ubuntu repositories will always be out of date (Ubuntu officially doesn’t support flatpak).
sudo add-apt-repository ppa:flatpak/stable
1 Like
I understand that the version will stay locked like most in the repos, but even it would get attention like any other package for major vulnerabilities I would hope. The fixes are backported upstream for this version (1.16) specifically for LTS distros. One is a complete sandbox escape and considered critical.
Thanks for the repo link though. Much appreciated.
You will surely get these backported fixes through Ubuntu Pro eventually…
3 Likes
This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.