Security update for flatpak (important)

An update that fixes two vulnerabilities is now available.

Description:

This update for flatpak fixes the following issues:

Update to flatpak 1.10.7:

• CVE-2022-21682: Introduce new option --nofilesystem=host:reset to
  support flatpak-builder 1.2.2 (bsc#1194611).
• CVE-2021-43860: A malicious repository could hav sent invalid
  application metadata in a way that hides some of the app permissions
  displayed during installation (bsc#1194610).

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2022-712=1