Skip to content
flatpak 1.15.8

Security fixes:

 * Don't allow an executable name to be misinterpreted as a command-line
   option for bwrap(1). This prevents a sandbox escape where a malicious
   or compromised app could ask xdg-desktop-portal to generate a .desktop
   file with access to files outside the sandbox. (CVE-2024-32462)

Other bug fixes:

 * Pass the -export-dynamic linker option as -Wl,-export-dynamic,
   fixing build failures with clang 18 and lld 18 (#5760)

 * Fix a double-free when installation is cancelled (#5763)

 * Fix installed-tests failure with "FUSERMOUNT: unbound variable"
   (#5751)

 * Translation updates: pt_BR (#5762), tr (#5761)

Git-EVTag-v0-SHA512: 6bb3122c4a22c23543d587bf1373bb73a64533affc5208847026ae28dc81f5fd16587a05e8c5f77ebafb522027e2e08173e4f31921183401b9259011e41384fa