[Pkg-utopia-maintainers] Bug#1132943: CVE-2026-34078: Sandbox escape involving symlinks passed to flatpak-portal

Simon McVittie smcv at debian.org
Wed Apr 8 00:22:05 BST 2026


On Tue, 07 Apr 2026 at 23:31:34 +0100, Simon McVittie wrote:
>I'm also preparing a bookworm update but that's more difficult, so I 
>haven't got as far as testing it yet.

Untested version here (compiles, passes autopkgtests, not tested beyond 
that): https://salsa.debian.org/debian/flatpak/-/merge_requests/7

     smcv



More information about the Pkg-utopia-maintainers mailing list