Flatpak 1.18.3 has been released as a maintenance update focusing on security fixes and regression repairs, rather than introducing new features. This update includes critical dependency updates for bubblewrap and xdg-dbus-proxy to address known vulnerabilities affecting sandboxing and D-Bus communication. Additionally, it resolves build regressions particularly on SELinux systems, along with fixes for flatpak-spawn subsandbox issues and crashes related to certain installation methods. Users can update to this version through their package manager or Flathub, with particular attention advised for those building runtimes locally on SELinux systems

Flatpak 1.18.3 Ships Security Fixes and Build Repairs for Linux

Flatpak 1.18.3 released today as a maintenance update focused on security dependency updates and regression repairs rather than new features. It bumps bubblewrap to 0.12.0 and xdg-dbus-proxy to 0.1.8 to close two known CVEs affecting Flatpak's sandboxing and D-Bus communication. The release also fixes a build regression on SELinux systems tracked as issue #6818, along with a flatpak-spawn subsandbox fix and a bundle install crash. Users can install it through their normal package manager or Flathub, though local runtime builders on SELinux systems get the most out of it.

Flatpak 1.18.3 Ships Security Fixes and Build Repairs for Linux @ Linux Compatible