Urgent.News

What's breaking now, across thousands of outlets.

Tech

Sovereign Tech Agency Providing Massive Investment Into Flatpak

The latest beneficiary of Germany's Sovereign Tech Agency is Flatpak where more than half a million Euros will be invested over the next two years to help with app sandboxing and other functionality...

The German Sovereign Tech Agency has invested €508,640 into the development and oversight of Flatpak, a secure, sandboxed platform for packaging and distributing Linux desktop software. This two-year initiative, co-organized by Modal and supported by Para-Real Ltd., aims to accelerate Flatpak's evolution and address its current limitations in security, robustness, and user and developer experience.

Flatpak is the primary application distribution method for image-based operating systems such as Fedora Silverblue, openSUSE Aeon, SteamOS, and GNOME OS. Major ecosystems like GNOME, KDE, and elementary prefer Flatpak as their preferred format. While Flatpak is a mature project, it still lags behind proprietary platforms like Android and iOS in security and sandboxing features.

Technical limitations include the inability to separate audio output from microphone access, as well as the lack of dedicated Portals for networking and VPNs. The investment will focus on closing critical gaps in the sandboxing story, introducing long-requested infrastructure, and ensuring general maintenance. The project will be led by Sebastian and Adrian, with organizational support from Kateryna and Cade.

Experienced contractors such as Philip Withnall, Julian Sparber, and Dhanuka Warusadura will contribute to the technical execution. The project is expected to run through the end of 2027, with plans to build long-term community capacity and formalize Flatpak's structures. The Sovereign Tech Agency invites the community to follow progress and engage on Matrix in #flatpak:matrix.org and #xdg-desktop-portals:matrix.org.

Written by urgent.news from Lobsters's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Also reported by 1 other outlet

Read the original at phoronix.com →

More in Tech

The Growing Threat: Attackers Using GitHub Repositories as Malware Staging Mechanisms

This blog was originally published by Brian Tant on the Raxis blog January 21, 2026 GitHub has become the backbone of modern software development, hosting over 100 million repositories and serving…

  • Cybercriminals use GitHub repositories to stage malware, targeting over 100 million repositories
  • Storm-0409 campaign infected nearly one million devices worldwide using GitHub
  • GitHub's trust, accessibility, and technical features make it attractive for attackers

Security Notice: @bananacool467/ui-tools — Use 0.1.9-beta or Newer

Published : August 27, 2026 Package : @bananacool467/ui-tools I want to clarify a security issue affecting earlier versions of @bananacool467/ui-tools .

  • Versions 0.1.0-beta through 0.1.7-beta contain security vulnerability
  • Unauthenticated WebSocket endpoint allows server PTY interaction
  • Update to 0.1.9-beta or newer to resolve vulnerability

More from Friday 28 August →