Flatpak has been released in version 1.18.2.
Flatpak is a framework for distributing and sandboxing Linux applications, independent of the distribution in use.
Unlike the preceding security release 1.18.1, this version is a pure bugfix release with seven fixes, including a resolved crash in the system helper and a fix for extensions not being populated in the sandbox.
Bug Fixes:
- Validate GVariant structure of summaries before using generated variant readers
- Fix crash in system helper when iterating cache directories
- Avoid corrupted output from non-UTF-8 characters in error messages
- Fix portal passing wrong file descriptor when sandbox-expose-fd-ro triggers fd remapping collision
- Fix system helper tracking wrong D-Bus sender for pulls
- Fix extensions not being populated in the sandbox due to unhandled EAGAIN from openat2
- Fix build failure with GLib versions older than 2.72

Source: GitHub