summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon McVittie <smcv@collabora.com>2021-10-11 14:11:23 +0100
committerSimon McVittie <smcv@collabora.com>2021-10-11 14:11:23 +0100
commitff0c48c780f419881d4530b13c340ee17a162ca3 (patch)
tree7ef803cb4f75c38b13c42e7481263fdf3209dcbb
parent89fb54123ace0499d7a948e37e4ca42d3e071087 (diff)
downloadflatpak-ff0c48c780f419881d4530b13c340ee17a162ca3.tar.gz
NEWS: Mention CVE-2021-41133
Signed-off-by: Simon McVittie <smcv@collabora.com>
-rw-r--r--NEWS2
1 files changed, 1 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 2c3fce6e..237e5604 100644
--- a/NEWS
+++ b/NEWS
@@ -21,7 +21,7 @@ In addition, this release fixes a security vulnerability in the portal
support. Some recently added syscalls were not blocked by the seccomp rules
which allowed the application to create sub-sandboxes which can confuse
the sandboxing verification mechanisms of the portal. This has been
-fixed by extending the seccomp rules.
+fixed by extending the seccomp rules. (CVE-2021-41133)
For details, see:
https://github.com/flatpak/flatpak/security/advisories/GHSA-67h7-w3jq-vh4q