Package: libostree-1-1
Version: 2026.3-1
Severity: serious
Tags: upstream help
Forwarded: https://github.com/ostreedev/ostree/issues/3635
After updating ostree to 2026.3 (fixing denial-of-service issue
GHSA-7cgc-gp99-6jmm), some Flatpak users are reporting that updating
apps from Flathub fails:
>Error: While pulling app/org.mozilla.firefox/x86_64/stable from remote
>flathub: Decompressed delta part exceeds configured limit of 60543795 bytes
Let's not let this migrate to testing until a fix is available.
I am unlikely to be able to fix this myself without re-introducing the
DoS issue, so I would appreciate help from anyone who understands
libostree's download protocol better than I do.
smcv
