Flatpak 1.18.4 fixes several sandbox escape and denial-of-service bugs
Flatpak 1.18.4 closes multiple security flaws, including privileged arbitrary-file overwrite/deletion paths during malicious app installation, exposed OCI authentication tokens, and ways for apps to kill host process groups or trigger unwanted service interactions. The release also hardens temporary repository directories against symlink traversal; the fixes are in both the stable 1.18.4 and development 1.19.2 lines.
Phoronix listed 17 forum comments, but its forum returned HTTP 403 during review, so I couldn’t verify community reactions.