-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Apr 2017 10:30:34 +0100 Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: all amd64 source Version: 0.8.5-1~bpo8+1 Distribution: jessie-backports Urgency: medium Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Description: flatpak - Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak0 - Application deployment framework for desktop apps (library) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) Changes: flatpak (0.8.5-1~bpo8+1) jessie-backports; urgency=medium . * Backport to jessie - debian/gbp.conf: adjust for this branch - debian/control: (build-)depend on libgtk-3-bin, not gtk-update-icon-cache - d/p/debian/Try-gtk-3.0-version-of-the-icon-cache-utility-first.patch: try to use gtk-update-icon-cache-3.0 before gtk-update-icon-cache - d/p/backport/*.patch, d/control: Relax GLib dependency to 2.42 . flatpak (0.8.5-1) unstable; urgency=medium . * New upstream bugfix release * Upstream security fixes: - dbus-proxy: Fix a use-after-free (no specific exploit is known) and several memory leaks - system-helper: Correct the check that was meant to prevent unprivileged users from downgrading system-wide-installed apps - Do not allow downgrading apps to validly-signed older versions unless a specific older version is requested, so that a man-in-the-middle cannot cause a downgrade to an older app version with a vulnerability * Other upstream fixes: - Increase GLib build-dependency to 2.44 (in practice this was already required, there is a patch in jessie-backports to relax this) - Collect system extension references from all system directories, not just the first that exists (upstream issue 654) - Stop using ostree trivial-httpd, which is not available in post-stretch ostree (upstream issues 658, 723) - Be build-time compatible with post-stretch ostree (upstream issue 756) - Strip ?query suffix before detecting whether a URI points to a .flatpakref or .flatpakrepo file (upstream issue 659) - Fix a typo in help output * d/tests/control: most tests now require python, for the ostree-trivial-httpd replacement . flatpak (0.8.4-3) unstable; urgency=medium . * Mark the one remaining patch as applied in 0.9.1 * Upload to unstable . flatpak (0.8.4-2) experimental; urgency=medium . * Explicitly build-depend on automake. Otherwise, the aspcud resolver used in experimental sometimes chooses automake1.11 as the best solution to dh-autoreconf's dependency on automake | automaken, causing FTBFS. - Set the dependency to 1.14.1 since flatpak is known to build successfully with that version in jessie-backports, whereas older versions are not known to work. . flatpak (0.8.4-1) experimental; urgency=medium . * New upstream bugfix release - Don't add flatpak directories to XDG_DATA_DIRS if already present - Do add flatpak directories to XDG_DATA_DIRS if it already has a non-default value - Improve progress estimates and reporting for UI frontends - Fill in many missing options in man pages - Support extensions that apply to multiple versions, particularly useful for OpenGL drivers - Support extensions that do not depend on any specific runtime, particularly useful for proprietary OpenGL drivers packaged with a static binary helper - Various fixes for error checking and crashes - Make flatpak_get_system_installations() return an array that owns (takes responsibility for freeing) its contents. This is technically an ABI break, but it makes this function consistent with others that have a similar signature, and nothing in Debian uses it yet. - Disable spliced reads in the FUSE file system, which don't appear to work - Make FamilyWild xauth tokens available in the sandbox, not just FamilyLocal - Fix a misleading message on systems without systemd --user: it now disables an optional feature without breaking sandboxing * Add patch simplifying profile.d snippet * Initially upload to experimental since this is relatively large for a stable-branch release Checksums-Sha1: e0ca0d8817a5b4002f4cf72fa998e8e923e60207 34160 libflatpak-doc_0.8.5-1~bpo8+1_all.deb 329b56702838440f30c224dc868f70ffa1493413 2963 flatpak_0.8.5-1~bpo8+1.dsc f79a2708bea4c6a9609b6294ca75712ff949db4a 20624 flatpak_0.8.5-1~bpo8+1.debian.tar.xz 6cbefd018cee373c93130618256578956ddba33c 530464 flatpak_0.8.5-1~bpo8+1_amd64.deb 939080e949970e201f58fdb50ff94ccadf2b1a1a 195256 flatpak-builder_0.8.5-1~bpo8+1_amd64.deb b71059a686c32a3366579ea7020f7f67dbbaa604 92166 flatpak-tests_0.8.5-1~bpo8+1_amd64.deb 1ce12fb27c8fd0857b0b3fb8fcb008353ccb12d6 15990 gir1.2-flatpak-1.0_0.8.5-1~bpo8+1_amd64.deb 94eba78e8d572f349381a68d74e7ef6051d5a488 27442 libflatpak-dev_0.8.5-1~bpo8+1_amd64.deb 5ca93e775053d69eb2296b65c4d07eccf75dd592 162098 libflatpak0_0.8.5-1~bpo8+1_amd64.deb Checksums-Sha256: 76c6bfc4c5d20ae1448711455b81d16bfa0238bac2b224b862644562d527b6f5 34160 libflatpak-doc_0.8.5-1~bpo8+1_all.deb cc1cbf67136d9ee9807aa442abdddb56fedd4e5551622df9d57bb78fc8284d29 2963 flatpak_0.8.5-1~bpo8+1.dsc 07a62463160abd0de666b49b043a62af46fc88a3fad235f372b1331b00a53e4d 20624 flatpak_0.8.5-1~bpo8+1.debian.tar.xz 020d15c74565e71a3a01d63aa59fd62db007a51b5f1e49214fd26abdb694165b 530464 flatpak_0.8.5-1~bpo8+1_amd64.deb 08203d941f4a94f1aaa2fe9c8ae31c8d461659d110c621383fc07a1d35ac1945 195256 flatpak-builder_0.8.5-1~bpo8+1_amd64.deb 3dd68d728d341f80d50556dd26e7d6e648a209ea3f841bd29b65a3057b34f52d 92166 flatpak-tests_0.8.5-1~bpo8+1_amd64.deb 35916a3e4df04d9377cbe706b53e3edede8aa51a2226678f386d7713f604f71b 15990 gir1.2-flatpak-1.0_0.8.5-1~bpo8+1_amd64.deb 347f50ee697716d3624a186c041106aa880bc25b19301e8c928cda723ebf79c6 27442 libflatpak-dev_0.8.5-1~bpo8+1_amd64.deb ff226cc21557ef7953eb4cd3d0995c86ab44129af9e655b04079e781e0b2888f 162098 libflatpak0_0.8.5-1~bpo8+1_amd64.deb Files: 0d019178ecc6ca77c1f8bbb4807f33b1 34160 doc optional libflatpak-doc_0.8.5-1~bpo8+1_all.deb d478b4805e9a720f0652755eb62ba742 2963 admin optional flatpak_0.8.5-1~bpo8+1.dsc be0c5e3d6f77aa28fd50738011c89699 20624 admin optional flatpak_0.8.5-1~bpo8+1.debian.tar.xz 4352fb9f8c0355bdad4f220e1e6f5b64 530464 admin optional flatpak_0.8.5-1~bpo8+1_amd64.deb 5725d12264a22c9ba8512a5e94f206a1 195256 devel optional flatpak-builder_0.8.5-1~bpo8+1_amd64.deb 93c36e73f76ccaef6c9b50fff4192efa 92166 misc optional flatpak-tests_0.8.5-1~bpo8+1_amd64.deb 03587b77b321837a7b3041eb4536fcd6 15990 introspection optional gir1.2-flatpak-1.0_0.8.5-1~bpo8+1_amd64.deb c9aaa4723c044645db227de0ac5deb56 27442 libdevel optional libflatpak-dev_0.8.5-1~bpo8+1_amd64.deb f66111c37d563d91152d98c010143f42 162098 libs optional libflatpak0_0.8.5-1~bpo8+1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAljkDMwACgkQTej/KmPH zJBiDA/8CO8kZr8+Sz6dgLpee1SXero7816zqBKutWs2lGk/Pixjropm3irKJAFm MA8ANuhyqAYaEKSrG3dNTUqMDi0MWByBMOQEHCjEoviW+zK5db56uUzptDfbc6ka 3QIo/5f1DSd3gs0V4psrmmSicaA0XrrjXjruDly4Gy8p3sHt/qFl/g/bvzrvURKa FTl8g7adojtnoCewH/251O3NyLtcA0Y4tuclSlJKyRjZpN+aoSXU+WStKNEfc8sk /jp40xj3J6mA1o5UwczHHtJ74GbfYwrqm8BUe8TbPv5NC3xTQiwLbgsgvdvNr0f0 L4TxGajKngcHcy80eSV2N5yjMMUIRGte4E3DSUiyw4H5J3iHLgbmy2NnfCOnyUac TYihPW3DINHxXdbgev42tavur71phDzfV7HLBx9brcvK3nF7GT4HKstX5MLoddYI jFLGgUH1hvPEVARiukfVbq9tHA1OtiIOCvp0Q69jf5N4e70Uprux5sHnKSJLaLaW s+8VU4HeKebsY8HcbdhT5pWJIhAxjZ+SyV69nsSLy8hFI8dLlx+yV+PQy/CN4v6D qxcmyIuEJQ3fotaqR2nK5dwVRPn6wJZXnZQFMvQrtHrxZ2UGJyPcYuY3Vv9sWFc7 mxEjgbiXPgujL3O1MHGDc2A+J9FhaEPEnDRUbqy3A5ldYmvxTfA= =4G7/ -----END PGP SIGNATURE-----