7.1Alta
flatpak-builder has a path traversal leading to arbitrary file read on host when installing licence files
flatpak flatpak-builder
flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key takes an array of paths to user defined licence files relative to the source directory of the module. The paths from that array are resolved us…