Those versions rely on libostree to download the summary and its signature when mirroring. libostree >= 2017.7 no longer does this. On affected flatpak versions, this breaks installation of new apps and runtimes system-wide.