-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Apr 2024 16:50:10 +0100 Source: flatpak Binary: flatpak flatpak-dbgsym flatpak-tests flatpak-tests-dbgsym gir1.2-flatpak-1.0 libflatpak-dev libflatpak0 libflatpak0-dbgsym Architecture: amd64 Version: 1.14.8-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: amd64 Build Daemon (x86-grnet-03) Changed-By: Simon McVittie Description: flatpak - Application deployment framework for desktop apps flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak0 - Application deployment framework for desktop apps (library) Changes: flatpak (1.14.8-1~deb12u1) bookworm; urgency=medium . * Backport upstream stable release for Debian 12 * Changes relative to 1.14.4-1+deb12u1 in bookworm-security: - New upstream stable release 1.14.6 + Don't parse `` as though it was the application name + Install a tmpfiles.d snippet to clean up /var/tmp/flatpak-cache-* during boot + Stop http transfers if a download in progress becomes very slow + Silence warnings when using GLib 2.77.0 or later + Bypass page cache for backend requests in revokefs, fixing installation errors with libostree 2023.4 or later + Show AppStream metadata in `flatpak remote-info` as intended, fixing a regression in 1.9.1 + Don't let Flatpak apps inherit $VK_DRIVER_FILES or $VK_ICD_FILENAMES from the host system, which would be wrong in the sandbox + Fix forward-compatibility with libappstream 0.17.x and 1.0 + Fix a memory leak + Fix some compiler warnings + Make the test failure produce a clearer message if a required tool is missing + Don't force `GIO_USE_VFS=local` for programs launched via flatpak-spawn + Documentation improvements - New upstream stable release 1.14.7 + Automatically reload D-Bus session bus configuration when apps are installed or upgraded, ensuring that any new .service files get picked up + Allow apps to be run if the D-Bus system bus is missing or non-functional + Add several more environment variables to the list not inherited into the sandbox: * $LD_AUDIT, $LD_PRELOAD for ld.so * $__EGL_VENDOR_LIBRARY_DIRS, etc. for EGL * $VK_ADD_DRIVER_FILES, etc. for Vulkan * $container, when running Flatpak inside a container manager + Use xdg-desktop-portal-gnome, if installed, to detect whether apps are running in the background + If an app's data is migrated to a new name and then deleted, don't try to migrate it again, avoiding a recursive symlink loop + Don't leak temporary variable $new_dirs from /etc/profile.d/flatpak.sh into user shell sessions + Avoid an out-of-bounds left-shift (which is technically undefined behaviour) when hashing object names + Fix critical warnings "GFileInfo created without standard::is-symlink" when using /var/lib/flatpak/extension with testing/unstable glib2.0 + Fix validation of documentation against Docbook DTD + Fix a misleading comment in the test for CVE-2024-32462 + Fix a double-free in the test suite + Skip more tests if bubblewrap works but FUSE doesn't - New upstream stable release 1.14.8 + Respin of 1.14.7 reverting unintended submodule changes - d/control: Move dbus-system-bus from Depends to Recommends. `flatpak run` no longer has a working system bus as a hard requirement (verified in `podman run --privileged --rm -it debian:sid-slim`) - Drop CVE-2024-32462 patches, included in the upstream stable release - debian/test.sh: Disable http proxy if used, to ensure we can reach a HTTP server on localhost during automated tests * Changes relative to 1.14.8-1 in unstable: - Revert polkitd dependencies to polkitd | policykit-1 as previously used in bookworm - Revert pkgconf dependencies to pkg-config as previously used in bookworm - Revert location of systemd unit to /lib/systemd/system as previously used in bookworm, dropping versioned dependency on debhelper 13.11.6~ - Revert changes related to Debian 13 GIR XML packaging policy Checksums-Sha1: 261b56b8e49edb8ac4e4c7ea2599fed1b19ac160 6618708 flatpak-dbgsym_1.14.8-1~deb12u1_amd64.deb 59248db06af362226fab4077d5aec2f1d4e73554 10368104 flatpak-tests-dbgsym_1.14.8-1~deb12u1_amd64.deb 0e75573a58ef4df6ef3e2d98a9d7cf5a6c2bb770 1179528 flatpak-tests_1.14.8-1~deb12u1_amd64.deb b4a6ab269b24ce8ff08f01e7f90f0225a874ad3f 14431 flatpak_1.14.8-1~deb12u1_amd64-buildd.buildinfo 0c0fb7f719d78924f45e07b4fb8b9d7ac0395ec7 1396444 flatpak_1.14.8-1~deb12u1_amd64.deb f3851e652e3fd3df6705be5b0fefd515e9fa4359 24984 gir1.2-flatpak-1.0_1.14.8-1~deb12u1_amd64.deb 7782d2478acb8a01ace3cfeaaddb089401e13836 68372 libflatpak-dev_1.14.8-1~deb12u1_amd64.deb 9a43426baa668c3ad28d2fb529983de7e972c877 1536788 libflatpak0-dbgsym_1.14.8-1~deb12u1_amd64.deb 26b285d63102221d2341f10f0d71b0f806531254 363576 libflatpak0_1.14.8-1~deb12u1_amd64.deb Checksums-Sha256: 30a4e9775dc2378200a5b318677d0a102171b97d8f2eb4144c5c7f30d6c001b5 6618708 flatpak-dbgsym_1.14.8-1~deb12u1_amd64.deb f29ee8bdcd344e595c3fd5dce4373a9a04996ae0b2f617664dd134766b8f5ccf 10368104 flatpak-tests-dbgsym_1.14.8-1~deb12u1_amd64.deb 97caf702a487abec39c434c59356feb229649fee420e86a8c1130dd4d5febb66 1179528 flatpak-tests_1.14.8-1~deb12u1_amd64.deb 3898b0e5041ecc90ae316f45334e714144fba8d5473297243632b8033a26030a 14431 flatpak_1.14.8-1~deb12u1_amd64-buildd.buildinfo e0fd798d03c40edb46e64045d5df76f2bcaed82893ea64d5b827b66b3fc62ec2 1396444 flatpak_1.14.8-1~deb12u1_amd64.deb 9f06f56431930accb3b9e977f1b943f22d331211a4a9fef090cbefff2fcd39aa 24984 gir1.2-flatpak-1.0_1.14.8-1~deb12u1_amd64.deb 652ea35b8dc932bc17ecd1f6f0f1d1899b3578413480963bf07a9b6b6caeff66 68372 libflatpak-dev_1.14.8-1~deb12u1_amd64.deb 047c2a89fbc4eac856acb48f09b347f0a3d8ba1ba036bd55954be0d5c9af6293 1536788 libflatpak0-dbgsym_1.14.8-1~deb12u1_amd64.deb f6429bda5b0fc392f8f00eff82c81890abe6deb4bdf618f99e2c6cfda0854e07 363576 libflatpak0_1.14.8-1~deb12u1_amd64.deb Files: 229dcc188a12ef7fb46d6c72c4ae2b84 6618708 debug optional flatpak-dbgsym_1.14.8-1~deb12u1_amd64.deb bad414fa5e08062b09be47b16b0ccada 10368104 debug optional flatpak-tests-dbgsym_1.14.8-1~deb12u1_amd64.deb 622521e5f50bc4f726d7377c99d82c4b 1179528 misc optional flatpak-tests_1.14.8-1~deb12u1_amd64.deb 062f42e6e93d06a80c46b64d0c77f3b2 14431 admin optional flatpak_1.14.8-1~deb12u1_amd64-buildd.buildinfo d8673e19906ab89dbe7c41e1e78c894c 1396444 admin optional flatpak_1.14.8-1~deb12u1_amd64.deb c8d44acf12726d6f8b31667d57c53ff9 24984 introspection optional gir1.2-flatpak-1.0_1.14.8-1~deb12u1_amd64.deb d134df3dec5bb69e30bc008b71e400b2 68372 libdevel optional libflatpak-dev_1.14.8-1~deb12u1_amd64.deb 7cb116bec726be146eb1894a722e06c6 1536788 debug optional libflatpak0-dbgsym_1.14.8-1~deb12u1_amd64.deb 21528efd93aa5d17461eebc60d75bba1 363576 libs optional libflatpak0_1.14.8-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEe8x49oT2k+seQstpgDm7h4zfCpIFAmZuCiYACgkQgDm7h4zf CpIJUhAAhdlOD0dNipDXIlKhJJo1geEkQnvhXXeYvFf1mtKrfvakCc2hAjN2j6vQ CnYjfIwPmoKmiJH1BOVLIB0TbaWoX9q3qDUM0NE8RGSXTgIGMoKEY0tStMocowTa o957qoELxfulEdfDMau8O1zOl5VmgoW/LcmM4hmJgnTG4iLxlVt1U14JPlKR4ANF H9VYG318/Js+6OkYxUBUwdEHbSgXu3kbaBQzi63N7Ibd/pIBO1XO3pzSUBW4b7jw 5W8plmuj1JnvJLZb1YRpeBzphRrQhIyYgpCuuYHahdhE+ib+3eb9j5+pMn9kWi3r 1gPcdjgp+xT7sd33fVU38eRlOqWUXBm4qGhVfrgadwV+/m/OBDLFDmlkzsXK9i8J zSVIFY5R/zMiMNm9tmHIxfs1fOTDuaqErunTdRjX2kjxyc9QZPocO6DvZTqDLNtJ 6HA4ay/kZKJjJcfEZl7twxE9q07kHeWJqnLnWTOyRc9Xx1IA5VPVuwvOFkVi0s7H 0h8vpxiB/EOfV4LGdJd9Ut+oQggr8KRufiub3KvJIZLOGfGd1Hgq8s2bFawJsfnJ EEC7S07yS7wC9z9lmtjtzSZZLTvkZeYBHAoycH2I5klSdU2PGOsVmVQMorC2j3NJ mGxLYTUjEEG25bbiD+wygzeSEel0uaSa1sevO/wZLrgWef1heN0= =doqu -----END PGP SIGNATURE-----