🕵️ Flatpak up to 1.8.4/1.9.3 on Linux flatpak-portal Service injection

A vulnerability was found in Flatpak up to 1.8.4/1.9.3 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the component flatpak-portal Service. Upgrading to version 1.8.5 or 1.9.4 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version. ...