[Pkg-utopia-maintainers] Bug#1144283: libostree-1-1:amd64: regression in flatpak after fixing GHSA-7cgc-gp99-6jmm: Decompressed delta part exceeds configured limit

[Simon McVittie]

Package: libostree-1-1
Version: 2026.3-1
Severity: serious
Tags: upstream help
Forwarded: https://github.com/ostreedev/ostree/issues/3635

After updating ostree to 2026.3 (fixing denial-of-service issue 
GHSA-7cgc-gp99-6jmm), some Flatpak users are reporting that updating 
apps from Flathub fails:

>Error: While pulling app/org.mozilla.firefox/x86_64/stable from remote flathub: Decompressed delta part exceeds configured limit of 60543795 bytes

Let's not let this migrate to testing until a fix is available.

I am unlikely to be able to fix this myself without re-introducing the 
DoS issue, so I would appreciate help from anyone who understands 
libostree's download protocol better than I do.

    smcv