This is a security update that fixes a sandbox escape where a malicious application can execute code outside the sandbox by controlling the environment of the "flatpak run" command when spawning a sub-sandbox.
See the advisory for details: https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2
sudo dnf upgrade --refresh --advisory=FEDORA-2021-f807eb480aPlease login to add feedback.
This update has been submitted for testing by kalev.
This update's test gating status has been changed to 'ignored'.
This update's test gating status has been changed to 'waiting'.
kalev edited this update.
This update's test gating status has been changed to 'ignored'.
This update has been pushed to testing.
Works
This update has been submitted for stable by bodhi.
This update has been pushed to stable.