A new Debian Linux update has been published: DSA 4830-1: flatpak security update
A flatpak security update has been released for Debian GNU/Linux 10 to address a bug in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system (a sandbox escape).Read more @ Linux Compatible
