-
flatpak (1.14.6-1) unstable; urgency=high
* New upstream stable release 1.14.6
- Don't allow an executable name to be misinterpreted as a command-line
option for bwrap(1). This prevents a sandbox escape where a malicious
or compromised app could ask xdg-desktop-portal to generate a .desktop
file with access to files outside the sandbox. (CVE-2024-32462)
- Don't parse `<developer><name/></developer>` as the application name
* d/control: Drop alternative dependencies on transitional policykit-1.
polkitd was released in Debian 12 and Ubuntu 22.04.
-- Simon McVittie <email address hidden> Wed, 17 Apr 2024 19:34:28 +0100
-
flatpak (1.14.5-1build6) noble; urgency=medium
* No-change rebuild against libarchive13t64
-- Steve Langasek <email address hidden> Sun, 07 Apr 2024 07:06:19 +0000
-
flatpak (1.14.5-1build5) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- Steve Langasek <email address hidden> Sun, 31 Mar 2024 00:58:42 +0000
-
flatpak (1.14.5-1build4) noble; urgency=medium
* No-change rebuild against libcurl3t64-gnutls
-- Steve Langasek <email address hidden> Sat, 16 Mar 2024 06:52:41 +0000
-
flatpak (1.14.5-1build3) noble; urgency=medium
* No-change rebuild against libglib2.0-0t64
-- Steve Langasek <email address hidden> Mon, 11 Mar 2024 22:36:01 +0000
-
flatpak (1.14.5-1build2) noble; urgency=medium
* No-change rebuild against libglib2.0-0t64
-- Steve Langasek <email address hidden> Fri, 08 Mar 2024 04:20:41 +0000
-
flatpak (1.14.5-1build1) noble; urgency=medium
* Rebuild against latest appstream
-- Jeremy Bícha <email address hidden> Sun, 17 Dec 2023 15:30:49 -0500
-
flatpak (1.14.5-1) unstable; urgency=medium
* New upstream stable release
* Drop patches cherry-picked in 1.14.4-2, applied upstream
* d/flatpak.install: Install new tmpfiles.d snippet
* d/test.sh: Disable http proxy if used, to ensure we can reach localhost.
Some reproducible.org builders set http_proxy, which makes attempts
to access our temporary http server on localhost fail with a 503 error.
* d/control: (Build-)depend on pkgconf in preference to pkg-config
* d/control: Add ${gir:Depends}, ${gir:Provides} to -dev package
(Helps: #1030223)
* d/control: Build-depend on required GIR XML files (Helps: #1030223)
* Install systemd system unit into /usr/lib/systemd/system.
This was allowed by TC resolution #1053901.
Build-depend on debhelper 13.11.6~ to ensure that the unit is still
picked up by dh_installsystemd.
-- Simon McVittie <email address hidden> Fri, 08 Dec 2023 12:25:50 +0000
-
flatpak (1.14.4-2) unstable; urgency=medium
* Team upload
[ Simon McVittie ]
* Mention #1033098, #1033099 in previous changelog entry
[ Jeremy Bicha ]
* Cherry-pick 2 patches for compatibility with glib 2.77
-- Jeremy Bícha <email address hidden> Tue, 18 Jul 2023 17:05:30 -0400