Change logs for flatpak source package in Noble

  • flatpak (1.14.6-1) unstable; urgency=high
    
      * New upstream stable release 1.14.6
        - Don't allow an executable name to be misinterpreted as a command-line
          option for bwrap(1). This prevents a sandbox escape where a malicious
          or compromised app could ask xdg-desktop-portal to generate a .desktop
          file with access to files outside the sandbox. (CVE-2024-32462)
        - Don't parse `<developer><name/></developer>` as the application name
      * d/control: Drop alternative dependencies on transitional policykit-1.
        polkitd was released in Debian 12 and Ubuntu 22.04.
    
     -- Simon McVittie <email address hidden>  Wed, 17 Apr 2024 19:34:28 +0100
  • flatpak (1.14.5-1build6) noble; urgency=medium
    
      * No-change rebuild against libarchive13t64
    
     -- Steve Langasek <email address hidden>  Sun, 07 Apr 2024 07:06:19 +0000
  • flatpak (1.14.5-1build5) noble; urgency=medium
    
      * No-change rebuild for CVE-2024-3094
    
     -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 00:58:42 +0000
  • flatpak (1.14.5-1build4) noble; urgency=medium
    
      * No-change rebuild against libcurl3t64-gnutls
    
     -- Steve Langasek <email address hidden>  Sat, 16 Mar 2024 06:52:41 +0000
  • flatpak (1.14.5-1build3) noble; urgency=medium
    
      * No-change rebuild against libglib2.0-0t64
    
     -- Steve Langasek <email address hidden>  Mon, 11 Mar 2024 22:36:01 +0000
  • flatpak (1.14.5-1build2) noble; urgency=medium
    
      * No-change rebuild against libglib2.0-0t64
    
     -- Steve Langasek <email address hidden>  Fri, 08 Mar 2024 04:20:41 +0000
  • flatpak (1.14.5-1build1) noble; urgency=medium
    
      * Rebuild against latest appstream
    
     -- Jeremy Bícha <email address hidden>  Sun, 17 Dec 2023 15:30:49 -0500
  • flatpak (1.14.5-1) unstable; urgency=medium
    
      * New upstream stable release
      * Drop patches cherry-picked in 1.14.4-2, applied upstream
      * d/flatpak.install: Install new tmpfiles.d snippet
      * d/test.sh: Disable http proxy if used, to ensure we can reach localhost.
        Some reproducible.org builders set http_proxy, which makes attempts
        to access our temporary http server on localhost fail with a 503 error.
      * d/control: (Build-)depend on pkgconf in preference to pkg-config
      * d/control: Add ${gir:Depends}, ${gir:Provides} to -dev package
        (Helps: #1030223)
      * d/control: Build-depend on required GIR XML files (Helps: #1030223)
      * Install systemd system unit into /usr/lib/systemd/system.
        This was allowed by TC resolution #1053901.
        Build-depend on debhelper 13.11.6~ to ensure that the unit is still
        picked up by dh_installsystemd.
    
     -- Simon McVittie <email address hidden>  Fri, 08 Dec 2023 12:25:50 +0000
  • flatpak (1.14.4-2) unstable; urgency=medium
    
      * Team upload
    
      [ Simon McVittie ]
      * Mention #1033098, #1033099 in previous changelog entry
    
      [ Jeremy Bicha ]
      * Cherry-pick 2 patches for compatibility with glib 2.77
    
     -- Jeremy Bícha <email address hidden>  Tue, 18 Jul 2023 17:05:30 -0400