Release 1.6.4
Changes in 1.6.4This release backports some of the OCI authenticator fixes from the 1.7 series, and should now be able to host flatpak images on e.g. docker hub.Other changes:Fix a use-after free in...
View ArticleRelease 1.8.0
New stable release series 1.8.Changes:FlatpakTransaction has a new signal "install-authenticator" which clients can handle to install authenticators needed for the transaction. This is done in the CLI...
View ArticleRelease 1.6.5
This is a minor fix to the authentication system that avoids unnecessary authentication when doing an update when the app hasn't changed. This was problematic for the OCI backend as it now...
View ArticleRelease 1.8.1
Changes in 1.8.1Avoid calling authenticator in update if ref didn't changeDon't fail transaction if ref is already installed (after transaction start)Fix flatpak run handling of userns in the...
View ArticleRelease 1.8.2
Changes in 1.8.2Added validation of collection id settings for remotesFix seccomp filters on s390Robustness fixes to the spawn portalFix support for masking update in the system installationBetter...
View ArticleRelease 1.8.3
Changes in 1.8.3Fixed progress reporting for OCI and extra-dataThe in-memory summary cache is more efficientFixed authentication getting stuck in a loop in some casesFixed authentication error...
View ArticleRelease 1.9.1
This is the first unstable release in the series that will lead to 1.10. The main change in this version is a new format for the summary file used when accessing an OSTree repository on the network....
View ArticleRelease 1.9.2
Some build fixes on non-x86-64 archesFix permission issue in endless installerFixed a bug where flatpak was accidentally clearing the summary cache during updates in the user installation.Fix handling...
View ArticleRelease 1.8.4
Changes in this release:Fix support for ppc64$ sha256sum flatpak-1.8.4.tar.xz 3066af9a4504d36754ea0b4cd7a32a84743894563e6c9aa2a3134f812b3ccf27 flatpak-1.8.4.tar.xz
View ArticleRelease 1.9.3
I expect this to be the final 1.9.x release, and we can expect 1.10.0 early next year, containing basically what's in this release in terms of features.A minor change in the new indexed summary format...
View ArticleRelease 1.8.5
This is a security update that fixes a sandbox escape where a malicious application can execute code outside the sandbox by controlling the environment of the "flatpak run" command when spawning a...
View ArticleRelease 1.10.0
This is the first stable release after the 1.9.x unstable series. The major new feature in this series compared to 1.8 is the support for the new repo format which should make updates faster and...
View ArticleRelease 1.10.1
Changes in 1.10.1Fix flatpak build on systems with setuid bwrapFix some compiler warningsAdd --enable-asan configure optionFix crash on updating apps with no deploy dataUpdate translations$ sha256sum...
View ArticleRelease 1.10.2
This is a security update which fixes a potential attack where a flatpak application could use custom formated .desktop files to gain access to files on the host system.Other changes:Fix memory...
View ArticleRelease 1.11.1
This is the first unstable release in the series that will lead to 1.12.New features:All instances of the same app-ID share their /tmp directoryAll instances of the same app-ID share their...
View ArticleRelease 1.11.2
Bug fixes:Fix logic error when migrating AppStream XMLImprove error-checkingFix various memory and file descriptor leaks, in particular with flatpak-spawn --env=...Fix fd confusion in flatpak-spawn...
View Article1.11.3
This is a release-candidate for Flatpak 1.12.0.Dependencies:For Linux distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, updating to version 0.5.0 is recommended, but...
View Article1.10.3
This is a maintenance update with various bug fixes backported from 1.11.x.Don't inherit an unusual $XDG_RUNTIME_DIR setting into the sandbox, fixing a regression introduced when CVE-2021-21261 was...
View ArticleRelease 1.10.4
This release fixes a security vulnerability in the portal support. Some recently added syscalls were not blocked by the seccomp rules which allowed the application to create sub-sandboxes which can...
View ArticleRelease 1.10.5
The security fix in the 1.10.4 release failed when used with some older versions of libseccomp (that don't know about the new syscalls).$ sha256sum flatpak-1.10.5.tar.xz...
View Article
