1.18.4

flatpak · Apr 18, 2024 · 11c8a96 · 11c8a96
1 parent a53d390
commit 11c8a96
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/NEWS b/NEWS
@@ -1,3 +1,12 @@
+Changes in 1.18.4
+=================
+Released: 2024-04-18
+
+- Don't allow commandline arrays when the first commandline item starts with
+  whitespace or hyphen. (CVE-2024-32462)
+- Do not store device access permission if it returned an error.
+- Fix crash with config files without a default backend set.
+
 Changes in 1.18.3
 =================
 Released: 2024-04-04