[From nobody Wed Apr 8 11:51:06 2026 Received: (at 1132958-close) by bugs.debian.org; 8 Apr 2026 10:49:52 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 85; hammy, 150; neutral, 136; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:49362) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wAQTo-005fx1-2F for 1132958-close@bugs.debian.org; Wed, 08 Apr 2026 10:49:52 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wAQTo-00Ekez-1E for 1132958-close@bugs.debian.org; Wed, 08 Apr 2026 10:49:52 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=5t0vCbw6MBXcr4pr0k4xQ13sLSZjyumzzX1IifRUW80=; b=ho2aR9V2wht82F0zV3pGHcSFJa 9cKoJElFHXqmg4NZ5++uMDpaK//ldq72IB3fLAMd6LxQ4kHENJP6U2jG8V7udx8JPcNXj0SxyMirM zsmA8nc8SRD5u9ArOVc4dPdwYoD0+qY++8MsWlrFUrfYJgx7ux+vvemYkocQ112O8ZD3o+YC7G/Hx IxR8RkkUa+YDNTTaem4FWxZ93gG8wJXJ4a+iHfW6dBXFKZr3xG42XWh07TwL8O0FHS2n8P6fBF11p /ZpSLqY1FGdSW8wkDi7Rdwbx3K+UdWmiU5qcDhdf45x+y1xnpBgYpkl6Z+tG8c1VH65iiVeX48QYs qhYh2OHA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wAQTn-00000008nL4-2Geg; Wed, 08 Apr 2026 10:49:51 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1132958-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: xdg-desktop-portal Debian: DAK Debian-Changes: xdg-desktop-portal_1.20.4+ds-1_source.changes Debian-Source: xdg-desktop-portal Debian-Version: 1.20.4+ds-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1132958: fixed in xdg-desktop-portal 1.20.4+ds-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3946273392855745200==" Message-Id: <E1wAQTn-00000008nL4-2Geg@fasolo.debian.org> Date: Wed, 08 Apr 2026 10:49:51 +0000 --===============3946273392855745200== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: xdg-desktop-portal Source-Version: 1.20.4+ds-1 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of xdg-desktop-portal, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1132958@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated xdg-desktop-portal pack= age) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Apr 2026 11:30:32 +0100 Source: xdg-desktop-portal Architecture: source Version: 1.20.4+ds-1 Distribution: unstable Urgency: medium Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debi= an.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1132958 Changes: xdg-desktop-portal (1.20.4+ds-1) unstable; urgency=3Dmedium . * New upstream release - This version fixes a vulnerability in which a malicious or compromised Flatpak app could send any file or directory to the trash, including those outside its sandbox. (GHSA-rqr9-jwwf-wxgj) (Closes: #1132958) Checksums-Sha1: 854bbd9d8f8b8d6b34fd54a7986a2ded348c140c 3316 xdg-desktop-portal_1.20.4+ds-1= .dsc 4350334996f8ccaf408d458155ca689d44a16f44 883080 xdg-desktop-portal_1.20.4+ds= .orig.tar.xz fb3463f5bbb40517870a35fd87050c221163646e 16148 xdg-desktop-portal_1.20.4+ds-= 1.debian.tar.xz 421e4af7fa6cbd5761215f00e32e40eec8aa7c62 18782 xdg-desktop-portal_1.20.4+ds-= 1_source.buildinfo Checksums-Sha256: 45332f29c8d82cb9eee3bd4e258db62fcae6ce1fe48384471ef0b99e53c2642f 3316 xdg-de= sktop-portal_1.20.4+ds-1.dsc 6bc4edaafdd71e55eafce8fa55cfc7ab2cb38b82f271c003b76472349d797153 883080 xdg-= desktop-portal_1.20.4+ds.orig.tar.xz c62783844a2a32dd281472e912fb4b0d078faf7eff4d13d2394d5fe33a0e8fc7 16148 xdg-d= esktop-portal_1.20.4+ds-1.debian.tar.xz 3e4e595f44372e71f79cc70fae6f358b04e20f6bd0fa7f028bb02ebb92b1449f 18782 xdg-d= esktop-portal_1.20.4+ds-1_source.buildinfo Files: ad7fdb470c5556ee4be2adffbd18021a 3316 admin optional xdg-desktop-portal_1.20= .4+ds-1.dsc df4e240150e42e8d95ed9d0095d89856 883080 admin optional xdg-desktop-portal_1.= 20.4+ds.orig.tar.xz 8d72c97c3e75e913239f900d6f64c69e 16148 admin optional xdg-desktop-portal_1.2= 0.4+ds-1.debian.tar.xz 8064b647d9512e8919224878f6aac0bf 18782 admin optional xdg-desktop-portal_1.2= 0.4+ds-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegc60a5pT6Jb/2LlI1wJnT6zMHYFAmnWLx4ACgkQI1wJnT6z MHa4chAAo23TLbP8KrveRG3uwMNo/OoAH1cEifjBKD1UuRmyS6BlUrSwS6uwR4Ab JRqQdqvVBE0e8FR+1Xm67/bE8WR7L4ZKGFNYd6OtGx3bExLo6GjaMakiaTrcazQ7 oiovluJ4eXj5zwYeL0WE4VXVOQNvl8a2zZz01PzCsgNI5nw/Lv2JAdWhUckxkz62 VWt29oaizo1Hn5X3RDuzuvBcbbzr88aN2wTnIjOE8Fatj9TS2VdF8Bz4x9OfvaXb qOVqIkts8A0OC80QfquLcJXOHj9HzIIBE9cO3LbA3KbubvFG3PYurAPUQERXLAXc P8kH7YWD51E6uiHLQ1OYjPQHszv7sB/rqMt5G6cQA/rf8YX9/b02fKExAxAcBTNK SafDSKjRukk2GarIc/03EisDEeD7eHvSLbUs+xG8AEhr4h9vyf+lzx1U6qhlsuE4 anjojaktf8JFo1P0TpyCwPQspiQO+DE7w6mA4xg5+r/QKZERmLrW9LWe6AW3avGq 8+gEiG9YN3qFLiV0S8XzCNoxprJW+1C5fZrwYv/D3APrRqYLTW3ANaBaX6SzbYYh QSODA4cMcCW7dTVb1qFoZ8RpTldWMKK9ZSzGBmKo0lI+f6egFjU4sAXaIeTDSu5Q TPi+/IyrZq0mrFLGw4iHwOJ5pFNBU0u8GtkyoZwZ9uiYGbeY1pE=3D =3DA76U -----END PGP SIGNATURE----- --===============3946273392855745200== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCadYyzwAKCRCb9qggYcy5 IfSLAP9w/5BMZkuD57fVyh4/8Ak26FyaOywu+JeyHSOxsa2OKgD+NVFfWpuzHAVn xxjjELIqGRkYjFsOftXMFoleuHOK6gk= =PkzV -----END PGP SIGNATURE----- --===============3946273392855745200==-- ]