Flatpak update addressing two vulnerabilities
Corrective updates for creating self-contained Flatpak packages 1.14.4, 1.12.8, 1.10.8, and 1.15.4 are now available, addressing two vulnerabilities: CVE-2023-28100 — the ability to copy and substitute text in the input buffer of the virtual console through manipulation with ioctl TIOCLINUX when installing a maliciously crafted flatpak package. For example, this vulnerability could be exploited to execute arbitrary commands in the console after completion of […]
