I verified the non-security part of this update with flatpak since that's the only thing that uses bubblewrap.
With Ubuntu (Unity) 16.10: sudo apt install flatpak wget https://people.gnome.org/~alexl/keys/gnome-sdk.gpg flatpak remote-add --user --gpg-import=gnome-sdk.gpg gnome http://sdk.gnome.org/repo/ flatpak --user install gnome org.gnome.Platform 3.22 flatpak --user remote-add --gpg-import=gnome-sdk.gpg gnome-apps http://sdk.gnome.org/repo-apps/ flatpak --user install gnome-apps org.gnome.Clocks stable After I installed the updated bubblewrap, I also ran flatpak --user install gnome-apps org.gnome.Todo stable I logged out and logged back in for Unity to update its list of updated apps. The Todo app has OnlyShowIn=Gnome; set so I used flatpak run org.gnome.Todo Both the GNOME Clocks app and the Todo app work. I'm marked this fix verified. ** Tags added: verification-done ** Tags removed: xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1643734 Title: privilege escalation via ptrace (CVE-2016-8659) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bubblewrap/+bug/1643734/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
