Gradience, Flatseal, Loupe Image Viewer, and Resources running on Ubuntu 16.04

Firefox 118.0.2 running on Ubuntu 16.04

Door Knocker, Collision, and Cartridges running on Ubuntu 16.04

ASHPD Demo running on Ubuntu 16.04, showing a notification through XDG portals

According to Door Knocker, almost half of the portals are unavailable on Ubuntu 16.04, compared to only one unavailable on Fedora 39 with GNOME, which means Flatpaks running here may have more limited capabilities than usual.

        • nicman24@kbin.social
          link
          fedilink
          arrow-up
          1
          ·
          8 months ago

          oh nvm i read something in the title wrong. also dont count on fast fixes for the kernel they have repeately lagged or even never arrived in older lts

      • IverCoder@lemm.eeOP
        link
        fedilink
        English
        arrow-up
        9
        arrow-down
        1
        ·
        8 months ago

        This is a completely patched Ubuntu 16.04 through the Extended Security Maintenance program.

        I would have tried this on Ubuntu 14.04 (supported until 2024) but Flatpak never supported 14.04 in the first place.

        • Semperverus@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          ·
          8 months ago

          They are talking about the code sitting inside the flatpak I think. If a developer fails to continue updating the system libraries a flatpak contains, you retain old vulnerabilities you could have otherwise fixed with a sudo apt update && apt upgrade or a sudo pacman -Syu

          • AProfessional@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            8 months ago

            The runtimes are well maintained and it shows warnings on no longer maintained versions. It’s less of a problem in practice.

    • neo (he/him)@lemmy.comfysnug.space
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      5
      ·
      8 months ago

      Flatpak has relatively weak sandboxing, takes up a lot more storage because sometimes dependencies get bundled a few dozen times, and most distressingly depends on the application developer to be available to do things like address supply chain attacks.

      • halva@discuss.tchncs.de
        link
        fedilink
        arrow-up
        4
        arrow-down
        1
        ·
        8 months ago

        relatively weak sandboxing

        because xorg exists, not because flatpak can’t do sandboxing well

        dependencies get bundled a few times

        only if there’s a need to do so. identical runtimes are shared

        depends on the application developer to be available to do things like supply chain attacks

        yeah as if a rogue package maintainer can’t do the same

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        8 months ago

        I don’t think you understand flatpaks. Flatpaks have dependencies such as the gnome or KDE frameworks. Those frameworks are only installed once so I’m not sure where you are getting the idea that they are installed multiple times.

        Also flatpaks usually come from flathub.org which is unlikely to be compromised. It not impossible but they seem to be pretty good about properly labeling apps.