-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 30 Jun 2017 07:49:40 +0100 Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: all source Version: 0.8.5-2+deb9u1~bpo8+1 Distribution: jessie-backports Urgency: high Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 861068 865413 Description: flatpak - Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak0 - Application deployment framework for desktop apps (library) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) Changes: flatpak (0.8.5-2+deb9u1~bpo8+1) jessie-backports; urgency=medium . * Backport to jessie - debian/gbp.conf: adjust for this branch - debian/control: (build-)depend on libgtk-3-bin, not gtk-update-icon-cache - d/p/debian/Try-gtk-3.0-version-of-the-icon-cache-utility-first.patch: try to use gtk-update-icon-cache-3.0 before gtk-update-icon-cache - d/p/backport/*.patch, d/control: Relax GLib dependency to 2.42 . flatpak (0.8.5-2+deb9u1) stretch-security; urgency=high . * d/p/Ensure-we-don-t-install-world-writable-dirs-or-setuid-fil.patch: Patch from upstream stable release 0.8.7. Prevent deploying files with inappropriate permissions (world-writable, setuid, etc.) (Closes: #865413) * d/p/dir-Ensure-.local-share-flatpak-is-0700.patch: Patch from upstream stable release 0.8.7. Make ~/.local/share/flatpak private to user to defend against app vendors that might have released files with inappropriate permissions in the past . flatpak (0.8.5-2) unstable; urgency=medium . * flatpak Recommends xdg-desktop-portal-gtk | xdg-desktop-portal-backend, so that sandboxed apps can communicate with the outside world (Closes: #861068) Checksums-Sha1: f9bfbdd31be9cd96471dbfd31a626da28f55a362 34470 libflatpak-doc_0.8.5-2+deb9u1~bpo8+1_all.deb 12e3736fe9a7e2da60937580db5c64014fdb93d5 2991 flatpak_0.8.5-2+deb9u1~bpo8+1.dsc 7cb5b22cedb71ecb5e4dfa5ca5eb55d5ec50512e 23404 flatpak_0.8.5-2+deb9u1~bpo8+1.debian.tar.xz Checksums-Sha256: f989c7ab4660a386f0592777026ee14557851d41469b5f1f1633af405041c80d 34470 libflatpak-doc_0.8.5-2+deb9u1~bpo8+1_all.deb 57456e36aac2a4f7479f9b025f667cf171f62a7abfbc3e06c7fea884d61e2e64 2991 flatpak_0.8.5-2+deb9u1~bpo8+1.dsc 83abfa770791e7f1b352ef5ec185e62c83ed3218db35a0313efa65ebd060a60b 23404 flatpak_0.8.5-2+deb9u1~bpo8+1.debian.tar.xz Files: bb8d3930be963847dea3e48779ac96a4 34470 doc optional libflatpak-doc_0.8.5-2+deb9u1~bpo8+1_all.deb 203cc23f5d93e73259b80d82c130e188 2991 admin optional flatpak_0.8.5-2+deb9u1~bpo8+1.dsc b882dbb5ebb4ea6564f6c59da9c36c68 23404 admin optional flatpak_0.8.5-2+deb9u1~bpo8+1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAllWGOAACgkQTej/KmPH zJAYxQ//RRnP170JveZ5JHiCh6Oy6DpU3i6z48Ld1gvdo04T3HjlwsU/qT/43V+b hP2rVxiAD3v/CkB2cs/zCWRWtl1o/i1XESVGljXT3ceY5+sWq7lXNPlk3qzXSkI3 9dyUNzVK//Q0sPJ6yI9DUAvTESbICUrE6f65gR04RHAT1AJMN2A1gArtx7RABl8i z9DBmHvJDUJfv2nKQJXBBlKb2UHpPvtTwmMTigBKJzh3P4tM+8Vs26wcy7PzsV+b cat/7hd+gQHVcokO0jDXnwga6NSyxuvT2rHxy2J6SjSNLFNGfMLAQ2vyGn9JJeKG BOUwR9drsj5H5sH2FPoGYs36bYWje3s3NfgDI8IOti2rcOx6xXY0H9rvPn7y5lBU HwqgTD9C3SL2Erk1BpETnlta2eEWjGKf3FJmUwByQX4M5G9V3fyvKvYSQXEj6QJn lPIV4Ek7s+LF37NU/Lq/SHBw6EdnfXE9eFmmtyoL76r4OHvK8na8o+vqzm8xchZi LoHaiFPXqZzCfCXF85VCxhdiBkoikH0WmsFyJ7F8qt5iG3O/WH6K6vkOmIVUxJ+d wMEVe9fg1bJaqNrClZrj0oaX45vUNRx+mYI0hd77kTd+LQc49hyjuN0yJMW341WC VxPkVmYMUsCckHWRrq6QgmjsqlCmw4XwFb6hE3SY/XNz97qgLZ4= =aiSD -----END PGP SIGNATURE-----