-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 15 Sep 2026 00:37:58 +0100 Source: flatpak-builder Architecture: source Version: 1.4.11-1 Distribution: unstable Urgency: high Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1147562 1147700 1147701 Changes: flatpak-builder (1.4.11-1) unstable; urgency=high . * New upstream security fix release - Disable git hooks when extracting module source (CVE-2026-86320, GHSA-j5p8-jgjc-f3xv) (Closes: #1147700) - Prevent file:// path traversal when run with --sandbox (no known CVE ID, GHSA-484h-v688-jq5j) (Closes: #1147701) * d/p/test-builder.sh-Allow-Appstream-icons-to-be-in-PNG-or-JPE.patch: Add proposed patch to fix test failure with appstream 1.2.0 (Closes: #1147562) * Standards-Version: 4.7.4 - Remove Priority: optional, no longer necessary Checksums-Sha1: 1a7389121e4272353d7e3253fd73148792b0bc75 2907 flatpak-builder_1.4.11-1.dsc 58c7ed971c63fc03c9be93cd4e0c9a8f6738bf4a 631656 flatpak-builder_1.4.11.orig.tar.xz 4a02bcd2d2f62e0ef6fccc11a10f66d1d8fd8b43 9696 flatpak-builder_1.4.11-1.debian.tar.xz 24d5c294c6a8f955f0bf95b2755a703908fba705 1411312 flatpak-builder_1.4.11-1.git.tar.xz 6d2cd9c2678729b89f0972403a004b87a0732a86 17704 flatpak-builder_1.4.11-1_source.buildinfo Checksums-Sha256: c39fad306a616dc3dae244addc4ba0c1f9e2b7f140da6653e66a83bccea96d5f 2907 flatpak-builder_1.4.11-1.dsc 2a5ef4f3eaea86f808aa477e57e65b6f68978eb1c034fafe05bffdebbf1dcd03 631656 flatpak-builder_1.4.11.orig.tar.xz f4a3ca80d887a91fcf67513e563609440bd75bbe160cf34393a0170ebff3d55e 9696 flatpak-builder_1.4.11-1.debian.tar.xz d343cbe47fd55b2707bea3ac16ba239b3b2c026deb9966a36a9f7bef92eb5db8 1411312 flatpak-builder_1.4.11-1.git.tar.xz a3e1516a832dd7ed7dc59b7722af55a781fe9788d689552efc882934088dd2e8 17704 flatpak-builder_1.4.11-1_source.buildinfo Files: edfaab4e2b863095e69b61769ba60859 2907 devel optional flatpak-builder_1.4.11-1.dsc 8b51e4b68a3e09321e7d58181aeb4701 631656 devel optional flatpak-builder_1.4.11.orig.tar.xz c45f50401bc7473da46c022bdecd0fea 9696 devel optional flatpak-builder_1.4.11-1.debian.tar.xz eb30d3fb55afdc296a733dd5288659c4 1411312 devel None flatpak-builder_1.4.11-1.git.tar.xz 67e9aac0adaa20db13a291a4ff01cc15 17704 devel optional flatpak-builder_1.4.11-1_source.buildinfo Git-Tag-Info: tag=a7bd269a01a129cdbaa22fe07701f57e31c6183b fp=7a073ad1ae694fa25bff62e5235c099d3eb33076 Git-Tag-Tagger: Simon McVittie <smcv@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmqohnkACgkQYG0ITkaD wHnvNhAAr9XQucX5Og2HAj+1ho87NltxGtx5vAtm47lvgdNVNHD4WW+vwoN43MOi QTVlkxzbK1q0HAB5zZbNFGLuy+WjFizC3QSmc33YUJO5pmzmVCigBWT31MBk0Wz5 XWmiDopVOboHC77xC2qA6/pU57ST3pIU/D1FmFDsGyzcndBeYjiu1iVXoesPSPuY QwJhzppGyxpY835uSesNzgI3RK98Qisfq3mOx5c/Z/ODfaxZ4RqHJLF54D9F9BlY iKqcE1+Vs0hFJk42OA8BgSSda6LdlNJhmQKGp/v8Z1MHPnCYJlkhunlGtUwHt6W3 72wWjitbky8H6BgP5w07qdMhXBBb2CThWt/QbmQRNWAek/ug4AfeVHicqgo7SWle vYxyRUCtX/bSLGG1tDNv9v/+jeEXCBlSYV+8kiGsph3jRMcT7mLC7eaOC8NCki4g KdQ7w92gg6QSoisjlpKUUmLUm3HsU06gwHjPC5tkdi7ZcTImVlFD/OmjeAFF76PD LE1mOF5QPsJlYXqHiTO/srExuNuw/5yrjo43IPy4vRzSJgpk3BK0tfomV8YFcBJZ kYZlnPX5FGPzZWW6U2jatMSmOiaOO5JlIGdTTfGL9WuR83Vvy+DRR6O1WmU0MJTU NSzyr2nYuHf/8dNi97D22imomthWaD3xRF7WlhfnmYblNVpRS7E= =BWf5 -----END PGP SIGNATURE-----
