Flatpak 1.10.2 update addresses a vulnerability affecting sandbox isolation.
A corrective update for the Flatpak 1.10.2 toolkit, which enables the creation of self-contained packages, has been released, fixing a vulnerability (CVE-2021-21381) that allowed a package author to bypass the established sandbox isolation mode and access files on the host system. This issue has been present since release 0.9.4. The vulnerability is caused by a flaw in the implementation of the file forwarding function, which enables access manipulation […]
