diff options
| author | Alexander Larsson <alexl@redhat.com> | 2018-01-30 14:28:26 +0100 |
|---|---|---|
| committer | Alexander Larsson <alexl@redhat.com> | 2018-01-30 14:28:26 +0100 |
| commit | fefe9f05c859da6334063d7e805e74066b7faa8e (patch) | |
| tree | 164f1ffa9cb8e603aa68868f25c181a7373297da | |
| parent | 75997883a2c5bb8ed0dffbd0ba6eeb008fede0ff (diff) | |
| download | flatpak-fefe9f05c859da6334063d7e805e74066b7faa8e.tar.gz | |
Update NEWS for release
| -rw-r--r-- | NEWS | 16 |
1 files changed, 16 insertions, 0 deletions
@@ -1,3 +1,19 @@ +Major changes in 0.10.3 +======================= + +This is a security fix release that fixes a sandbox escape in the +flatpak dbus proxy. This issue was found by Gabriel Campana of The +Google Security Team. + + * Fix dbus proxy vulnerability in authentication phase + * Make permission handling ignore unknown permissions for forwards + compatibility + * Removed incorrect error message in update --appdata when ther + was no updates + * Fix handling of abort in the duplicate remote prompt + * Fix division by zero in progress calculation + * Fix flatpak remote-info --show-metadata + Major changes in 0.10.2.1 ========================= |