A month ago, Alex Larsson and his team threw a new major version of its utility for software deployment, package management and application virtualization for Linux desktop environments. Flatpak v1.6 arrived with important news, many of them related to security, including a new option that allows you to make payments. Today, Larsson has launched Flatpack 1.6.1, the first maintenance update in this important series.
The complete list of news, available in your GitHub page, pick up 6 outstanding novelties. On the other hand, Larsson says that this is a launch that comes to improve security, at least in part. As he explains, there was an annoying bug that needed to be fixed and it is now fixed in Flatpak 1.6.1. Below you have both the developer's explanation and the list of new features included in this version.
What's new in Flatpak 1.6.1
- New permit –Device = shm which gives access to host / dev / shm, as needed for jack.
- Correct download size generated in build-commit-from.
- Sub-sandbox now allows the child to share the caller's gpu when they have full access to the device.
- Fixed crash with disabled remotes.
- Fix builds with older versions of glib.
- Update translations.
This is a (minor) security update. Flatpak 1.6.0 added the ability for an application to request that it be updated, as long as the new version does not require new permissions. Unfortunately, in some special cases, if an application had access to the home directory, but not the rest of the file system, an update would still be allowed where the new version could access some files outside the home directory ... This is fixed in this version , and it is recommended that all 1.6.0 users update
Flatpak 1.6.1 is now available as a tarball since this link. For those who want to install it through the repository, it should soon appear in the developer's (sudo add-apt-repository ppa: alexlarsson / flatpak).