Re: Packages providing Flatpak sandbox escapes via vulnerable MIME Type Handler

On Wed, Jul 8, 2026 at 2:24 PM Michael Cronenworth <[email protected]> wrote:
>
> On 7/8/26 6:40 AM, Daniel P. Berrangé wrote:
> > Is the solution not a matter of making the binfmt-misc handler always
> > be installed by the core wine RPM, and droppping the .desktop file ?
> >
> > Upstream quite reasonably wants to use a .desktop file because that
> > offers greater platform portability. The secrity scenario with flatpaks
> > sandboxing is only a Linux problem (at least right now). Portability
> > of .desktop files is not relevant for Fedora though, so surely we can
> > diverge a little rely on the binfmt-misc file alone and not register
> > the mime handler ?
>
> I'll be making that change the next time I have time to update wine, which has
> lacked an update for too long.

Thank you!

> I tried reviewing the history of having binfmt registration a separate package but I
> didn't see a reason. It's been this way since 2011.
> --
> _______________________________________________
> devel mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
> Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new