-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Apr 2024 16:50:10 +0100 Source: flatpak Binary: flatpak flatpak-dbgsym flatpak-tests flatpak-tests-dbgsym gir1.2-flatpak-1.0 libflatpak-dev libflatpak0 libflatpak0-dbgsym Architecture: armel Version: 1.14.8-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Simon McVittie Description: flatpak - Application deployment framework for desktop apps flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak0 - Application deployment framework for desktop apps (library) Changes: flatpak (1.14.8-1~deb12u1) bookworm; urgency=medium . * Backport upstream stable release for Debian 12 * Changes relative to 1.14.4-1+deb12u1 in bookworm-security: - New upstream stable release 1.14.6 + Don't parse `` as though it was the application name + Install a tmpfiles.d snippet to clean up /var/tmp/flatpak-cache-* during boot + Stop http transfers if a download in progress becomes very slow + Silence warnings when using GLib 2.77.0 or later + Bypass page cache for backend requests in revokefs, fixing installation errors with libostree 2023.4 or later + Show AppStream metadata in `flatpak remote-info` as intended, fixing a regression in 1.9.1 + Don't let Flatpak apps inherit $VK_DRIVER_FILES or $VK_ICD_FILENAMES from the host system, which would be wrong in the sandbox + Fix forward-compatibility with libappstream 0.17.x and 1.0 + Fix a memory leak + Fix some compiler warnings + Make the test failure produce a clearer message if a required tool is missing + Don't force `GIO_USE_VFS=local` for programs launched via flatpak-spawn + Documentation improvements - New upstream stable release 1.14.7 + Automatically reload D-Bus session bus configuration when apps are installed or upgraded, ensuring that any new .service files get picked up + Allow apps to be run if the D-Bus system bus is missing or non-functional + Add several more environment variables to the list not inherited into the sandbox: * $LD_AUDIT, $LD_PRELOAD for ld.so * $__EGL_VENDOR_LIBRARY_DIRS, etc. for EGL * $VK_ADD_DRIVER_FILES, etc. for Vulkan * $container, when running Flatpak inside a container manager + Use xdg-desktop-portal-gnome, if installed, to detect whether apps are running in the background + If an app's data is migrated to a new name and then deleted, don't try to migrate it again, avoiding a recursive symlink loop + Don't leak temporary variable $new_dirs from /etc/profile.d/flatpak.sh into user shell sessions + Avoid an out-of-bounds left-shift (which is technically undefined behaviour) when hashing object names + Fix critical warnings "GFileInfo created without standard::is-symlink" when using /var/lib/flatpak/extension with testing/unstable glib2.0 + Fix validation of documentation against Docbook DTD + Fix a misleading comment in the test for CVE-2024-32462 + Fix a double-free in the test suite + Skip more tests if bubblewrap works but FUSE doesn't - New upstream stable release 1.14.8 + Respin of 1.14.7 reverting unintended submodule changes - d/control: Move dbus-system-bus from Depends to Recommends. `flatpak run` no longer has a working system bus as a hard requirement (verified in `podman run --privileged --rm -it debian:sid-slim`) - Drop CVE-2024-32462 patches, included in the upstream stable release - debian/test.sh: Disable http proxy if used, to ensure we can reach a HTTP server on localhost during automated tests * Changes relative to 1.14.8-1 in unstable: - Revert polkitd dependencies to polkitd | policykit-1 as previously used in bookworm - Revert pkgconf dependencies to pkg-config as previously used in bookworm - Revert location of systemd unit to /lib/systemd/system as previously used in bookworm, dropping versioned dependency on debhelper 13.11.6~ - Revert changes related to Debian 13 GIR XML packaging policy Checksums-Sha1: 79119eee0ec7bf8528abb1bf08e0bf9189da4d72 6144888 flatpak-dbgsym_1.14.8-1~deb12u1_armel.deb a04375fcde15b94835e92fc415401b5858b778f4 9584000 flatpak-tests-dbgsym_1.14.8-1~deb12u1_armel.deb 4af30624e699f804ed78c1c1c78d501e2f7a34d9 975324 flatpak-tests_1.14.8-1~deb12u1_armel.deb 561d212061e737ad51341ade1865691815d39b3a 14298 flatpak_1.14.8-1~deb12u1_armel-buildd.buildinfo 1985dd20bad6c6f8fd5a5e840ba77a0d4d257ec4 1234588 flatpak_1.14.8-1~deb12u1_armel.deb 35dae2d11529da3124f1f501e0a2372b1e9bf74a 24960 gir1.2-flatpak-1.0_1.14.8-1~deb12u1_armel.deb a49bbf9f19e1507160140ff06ff4c61e2799c92b 68380 libflatpak-dev_1.14.8-1~deb12u1_armel.deb e9f4ec478ad9b8a399cc8ed12565712d990f8ac7 1494320 libflatpak0-dbgsym_1.14.8-1~deb12u1_armel.deb 62b7e85092ee79231f197040bc9b00ab87270311 307044 libflatpak0_1.14.8-1~deb12u1_armel.deb Checksums-Sha256: 2285750e0265a7fc1b95a93c033815c1e24d6032e264da5fc096c20cff5419e6 6144888 flatpak-dbgsym_1.14.8-1~deb12u1_armel.deb 90ec74495e29f1958dcf22861920f588d753a634b0f8f2411bab6698c9130a62 9584000 flatpak-tests-dbgsym_1.14.8-1~deb12u1_armel.deb 6e49092d23ba251858218d986021d5a062dc60157f087e732ba0d2eb938b75ed 975324 flatpak-tests_1.14.8-1~deb12u1_armel.deb 3a87a37468fbd34239ad5e1028377c57cc497de1077423915169f739507faa29 14298 flatpak_1.14.8-1~deb12u1_armel-buildd.buildinfo 9fb77fdd7f1dc69caf5b597d379a4d78979755792fc64e48b66a754c9ff9e177 1234588 flatpak_1.14.8-1~deb12u1_armel.deb f955c00041dcdf98a3a168ce1c3bf1f2d203cf1d889eeeaca0f56fa421768a5c 24960 gir1.2-flatpak-1.0_1.14.8-1~deb12u1_armel.deb b70c12e0a81522b2dd3c4ca05ca406d00efba7c1b7e67cd88ea339f214ad6638 68380 libflatpak-dev_1.14.8-1~deb12u1_armel.deb 8dead639155fefd9c19c0fb53c81889dda38507e0553e189baba4fdfae547cac 1494320 libflatpak0-dbgsym_1.14.8-1~deb12u1_armel.deb e397fa015d0ccf7071ade67ef5cfa9aa1ed62a96f3ffca5d18594f142d21605c 307044 libflatpak0_1.14.8-1~deb12u1_armel.deb Files: 354bb870696a0ba1b20addc0285c5be8 6144888 debug optional flatpak-dbgsym_1.14.8-1~deb12u1_armel.deb 3d89056e379422d465a1f5f093c4f0af 9584000 debug optional flatpak-tests-dbgsym_1.14.8-1~deb12u1_armel.deb 4220145aca4822cade50641b302f0197 975324 misc optional flatpak-tests_1.14.8-1~deb12u1_armel.deb 6cd5af40f8181ed5606841330f503b72 14298 admin optional flatpak_1.14.8-1~deb12u1_armel-buildd.buildinfo 481c6190c092125b98fe92074ad25647 1234588 admin optional flatpak_1.14.8-1~deb12u1_armel.deb ee3a27a03dc7c744912facbd1afb6737 24960 introspection optional gir1.2-flatpak-1.0_1.14.8-1~deb12u1_armel.deb 056f496ff612bdd1801f262ca1011361 68380 libdevel optional libflatpak-dev_1.14.8-1~deb12u1_armel.deb ee4faa1327d7ea30a99d927863710a2e 1494320 debug optional libflatpak0-dbgsym_1.14.8-1~deb12u1_armel.deb d34c9f6466069eb0712923a8ef49c96a 307044 libs optional libflatpak0_1.14.8-1~deb12u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEw2TRpv7HYIvK+TsIbEMdCP/rlD8FAmZuDpAACgkQbEMdCP/r lD/FJg//cN2TbZbz1VN4Y/mNU7o16tjA6MZ6NFcb11PK9+uTG/EEWoDvKElTDcsi ZiwVeURq1vNJJf7D2E9bt3Ylf6w9lYVlkKzZGFpJZblxCxDqNZE4cHYghOJku0Cq ZkLrXmlGRFvGZiXJTV57oRKbwkjFyIS1oMfjAjHYd36eO94gNfMxqSrNhQhLEJZf pDN3FiJagfQowZxWD4I4RLsUVh1JK4MVCqCBbI/3FU7NvF5trzkPqwaqRP3qSSfB bISBjRXIVpbcH4U3Qm6V4R5ikjgFhyOM8/FnfbR9kgNKua+Yc9Q6lzib8MdZZVkl 6MF7KbFRiraJ86cAHUs54qXtOT8/xmsKcBtBxoAnsZz6xQiTgTU3w/UHqcJrm9iB 0y6tT1uYgTVe8VpaIvIrHk/FGWSUTVzs11GkDuhKh8+G0QBDJO8RmNVSDRXsNpCd y5Bliaqs7GJ4z1YACnzFCz2Yf+8UlnVyoQls2+ncySMrV4720sN6bspo4bdCR4oj KBSxsiMHx+o8uNly9M5dFth4wuvAa4Z6ct2vP1DeSh0TqSG6DLAmxnko1IcPnAHU ixR0olp7JdxEL7Sawu40TBGenOv8KE9RQnZXSoY69IIFboKzgQO6vTkkqFu3wdpu Qim169rKNV+I0HbT9sWwzD4XUlqmVrfGD5G3wcDESPBgHr9msFE= =8mmH -----END PGP SIGNATURE-----