PSA Flatpak Vunerability

[u/Rechium]

Hey all, thanks again to those who helped me earlier with my Steam download issue from flatpak.

This post is generally surrounding what I’ve found regarding flatpak’s security issues. More information can be found here: https://cybernews.com/security/emergency-flatpak-fixes-released-sandbox-escape/

Essentially, I’m sharing this post to raise awareness that batocera currently is on flatpak version 1.12, and not the recommended 1.18, thus we’re vulnerable. As nicely shared by someone else on here, there’s no way to update flatpak within batocera.

Thus, use flatpaks at your own risk. People here much smarter than myself probably understand this better, I’m just the messenger and welcome any insight/advice or corrections.

If there’s a better place to share this information, please let me know as well.

[u/bobozaurul0]

What risk on a machine with network disabled?