-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Apr 2024 16:50:10 +0100 Source: flatpak Binary: flatpak flatpak-dbgsym flatpak-tests flatpak-tests-dbgsym gir1.2-flatpak-1.0 libflatpak-dev libflatpak0 libflatpak0-dbgsym Architecture: s390x Version: 1.14.8-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Simon McVittie Description: flatpak - Application deployment framework for desktop apps flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak0 - Application deployment framework for desktop apps (library) Changes: flatpak (1.14.8-1~deb12u1) bookworm; urgency=medium . * Backport upstream stable release for Debian 12 * Changes relative to 1.14.4-1+deb12u1 in bookworm-security: - New upstream stable release 1.14.6 + Don't parse `` as though it was the application name + Install a tmpfiles.d snippet to clean up /var/tmp/flatpak-cache-* during boot + Stop http transfers if a download in progress becomes very slow + Silence warnings when using GLib 2.77.0 or later + Bypass page cache for backend requests in revokefs, fixing installation errors with libostree 2023.4 or later + Show AppStream metadata in `flatpak remote-info` as intended, fixing a regression in 1.9.1 + Don't let Flatpak apps inherit $VK_DRIVER_FILES or $VK_ICD_FILENAMES from the host system, which would be wrong in the sandbox + Fix forward-compatibility with libappstream 0.17.x and 1.0 + Fix a memory leak + Fix some compiler warnings + Make the test failure produce a clearer message if a required tool is missing + Don't force `GIO_USE_VFS=local` for programs launched via flatpak-spawn + Documentation improvements - New upstream stable release 1.14.7 + Automatically reload D-Bus session bus configuration when apps are installed or upgraded, ensuring that any new .service files get picked up + Allow apps to be run if the D-Bus system bus is missing or non-functional + Add several more environment variables to the list not inherited into the sandbox: * $LD_AUDIT, $LD_PRELOAD for ld.so * $__EGL_VENDOR_LIBRARY_DIRS, etc. for EGL * $VK_ADD_DRIVER_FILES, etc. for Vulkan * $container, when running Flatpak inside a container manager + Use xdg-desktop-portal-gnome, if installed, to detect whether apps are running in the background + If an app's data is migrated to a new name and then deleted, don't try to migrate it again, avoiding a recursive symlink loop + Don't leak temporary variable $new_dirs from /etc/profile.d/flatpak.sh into user shell sessions + Avoid an out-of-bounds left-shift (which is technically undefined behaviour) when hashing object names + Fix critical warnings "GFileInfo created without standard::is-symlink" when using /var/lib/flatpak/extension with testing/unstable glib2.0 + Fix validation of documentation against Docbook DTD + Fix a misleading comment in the test for CVE-2024-32462 + Fix a double-free in the test suite + Skip more tests if bubblewrap works but FUSE doesn't - New upstream stable release 1.14.8 + Respin of 1.14.7 reverting unintended submodule changes - d/control: Move dbus-system-bus from Depends to Recommends. `flatpak run` no longer has a working system bus as a hard requirement (verified in `podman run --privileged --rm -it debian:sid-slim`) - Drop CVE-2024-32462 patches, included in the upstream stable release - debian/test.sh: Disable http proxy if used, to ensure we can reach a HTTP server on localhost during automated tests * Changes relative to 1.14.8-1 in unstable: - Revert polkitd dependencies to polkitd | policykit-1 as previously used in bookworm - Revert pkgconf dependencies to pkg-config as previously used in bookworm - Revert location of systemd unit to /lib/systemd/system as previously used in bookworm, dropping versioned dependency on debhelper 13.11.6~ - Revert changes related to Debian 13 GIR XML packaging policy Checksums-Sha1: ddfa5d3bd7625167f8ee4cfc58778913a53cf57b 6222448 flatpak-dbgsym_1.14.8-1~deb12u1_s390x.deb c9d1fc7bdf37fedf57dd4cf00c101e0f49de8b45 9675512 flatpak-tests-dbgsym_1.14.8-1~deb12u1_s390x.deb c7e50ffec6a83e30516a29e346efe901ad90ba1d 1049416 flatpak-tests_1.14.8-1~deb12u1_s390x.deb fcb3437b04debbc0c67535b70aa26d49ceeedd96 14284 flatpak_1.14.8-1~deb12u1_s390x-buildd.buildinfo 5252cec3a43a0a9ca760bf097704ecb7e1fa09dd 1299140 flatpak_1.14.8-1~deb12u1_s390x.deb e000aa318147a8e5e99b76fcb369497f39f9fb5a 24812 gir1.2-flatpak-1.0_1.14.8-1~deb12u1_s390x.deb aeffb8c602ea55285ca99caadc1d79e7f9f4c3cb 68360 libflatpak-dev_1.14.8-1~deb12u1_s390x.deb 29a4f28097a1f2afb7bdcacb342e38a781db84f7 1503296 libflatpak0-dbgsym_1.14.8-1~deb12u1_s390x.deb 7a1e78a2803e899794a42a8283c502e9e72e0615 324272 libflatpak0_1.14.8-1~deb12u1_s390x.deb Checksums-Sha256: ff539e1c7c1d2a816d65cb68ba85da9fa66d86da318ef9f5f83305a50c6d9fe9 6222448 flatpak-dbgsym_1.14.8-1~deb12u1_s390x.deb aa465efc8f5e75d39cebcba057ebec47f56965b0f8e0c5f837a99f02442cda34 9675512 flatpak-tests-dbgsym_1.14.8-1~deb12u1_s390x.deb 4313eb23e55594bf8a37c217f8989434aff6589618e923b4e08c8dd810fae8d2 1049416 flatpak-tests_1.14.8-1~deb12u1_s390x.deb d88c7f8ff3b1146f9efec556b792e83f8a80460b5edcf01f1da5b2b71436cb1c 14284 flatpak_1.14.8-1~deb12u1_s390x-buildd.buildinfo 0521296eab57ce805d6f3eeb45d39fac5fea3b0351f98c28d5975bc91e43ac2e 1299140 flatpak_1.14.8-1~deb12u1_s390x.deb 5c3a88a142fd756501beb5da2dd229a4e43d902e05fbd6b4f8ff05752f9a96fc 24812 gir1.2-flatpak-1.0_1.14.8-1~deb12u1_s390x.deb fa3f0e16723e1b277f283e0f463eeb839c962d0b6021527e14006c268b49d38a 68360 libflatpak-dev_1.14.8-1~deb12u1_s390x.deb e66ac86fb4d737271c0a0722fd570c07c4662f59b02462ecb6d259e67d933ceb 1503296 libflatpak0-dbgsym_1.14.8-1~deb12u1_s390x.deb f8eb38b2324064c88e30896cf8c0446819f62b8fd67fdaba0290e93d64abb63e 324272 libflatpak0_1.14.8-1~deb12u1_s390x.deb Files: b1e3267b4abba242c8b98506b03aea5d 6222448 debug optional flatpak-dbgsym_1.14.8-1~deb12u1_s390x.deb 0760fdc4556113fd51361f64d64cd72b 9675512 debug optional flatpak-tests-dbgsym_1.14.8-1~deb12u1_s390x.deb 2ae030f3961dd5ffef0226557d1489e5 1049416 misc optional flatpak-tests_1.14.8-1~deb12u1_s390x.deb 1e1067803d9350c8ab1f10225130cfd8 14284 admin optional flatpak_1.14.8-1~deb12u1_s390x-buildd.buildinfo be728d3e5a0700dff0e3bab2142b98fc 1299140 admin optional flatpak_1.14.8-1~deb12u1_s390x.deb 0180166c740977c573038f7cf04f0e5b 24812 introspection optional gir1.2-flatpak-1.0_1.14.8-1~deb12u1_s390x.deb 53457b56c8bd5cfe1bb843303cae5fe8 68360 libdevel optional libflatpak-dev_1.14.8-1~deb12u1_s390x.deb 518c9ae0ae7934ff258bc8c3c47a991c 1503296 debug optional libflatpak0-dbgsym_1.14.8-1~deb12u1_s390x.deb fc8feb6fa0b5dae64946ddc1d2f2ed75 324272 libs optional libflatpak0_1.14.8-1~deb12u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETdQgQHyJW2hcXsTC6b+AMjGgQHgFAmZuEkwACgkQ6b+AMjGg QHj5XA/+PnYQ36suHEEi74RZIYQ8NaHvhBQ5Y8nPjaDBhCeTeDAdVQ5UyUD6uVup wLRTSl4hRMb5EBOa094esnVet2BPflcTBglU0MWLkDjtc78U0ZuJc+/vQQAwoaWK U02cK6N2NRUAqSuHN+oIFP9NZDWlMWmt98J27QrvHZK4eU817EoqBW7eH/smt9fC CxP4BPxwY2S0X4PmeBxPAXR1SK7d2PvwzmHnGw0kUn2n2lzpYhTz8gOuhOhXdTFR TS9ofG9/KLAuVjexatlGyb5N3+k/WyMbQrZAFyrebVnDCrGC7jF+A8+8/+UKPIfP vNn+xwrNCYxMo0zo1UEpUXaZ61D8/1nPdhhfdXJLOBTyRpxnBrAJYZE3mCNuAD06 LqYDOeqMUqeBiH2OG/H5YEeceVLPfQvYufvdH/IY9H71UbWsdMR7qEPANQ6NdYeC 3rwoJs0Q6N/1QUFzDpsxmy29Itzpp8DM5g5VhdQ07dStfGUqXpo7x9kLeGxg4Xt5 WhfiKa9CJXzC9aUmwwj4c/m8wtxwcGOL1xgYmzaa3Mt0PeckSo7Q5bx3+NBfIOQo p1x2L9IJ6i4H2qVLxdFhN694mCOMI5kQup6cK/YZRMdX5w8Un5AQbopVoCcsbiHo AuiRTmiF03os+c9Iwkr3keBSUYnY1tBPoRZs1irRFZz3+Fc+yZY= =4cC0 -----END PGP SIGNATURE-----