[Pkg-utopia-maintainers] Bug#824647: xdg-app/flatpak: should use system version of bubblewrap

Simon McVittie smcv at debian.org
Wed May 18 12:07:02 UTC 2016


Package: xdg-app
Version: 0.5.2-1
Severity: important
Control: block -1 by 824646
X-Debbugs-Cc: bubblewrap at packages.debian.org

(Justification for severity: embedded code copy of security-sensitive code.)

xdg-app has been renamed to Flatpak, which I'm going to upload soon.
In Flatpak, the former xdg-app-helper binary has been spun off into a
separate project, bubblewrap, which is already packaged in Debian.
Flatpak uses bubblewrap as a git submodule rather than using a system
copy.

For the moment, at least until we get a better idea of how closely the
version numbers of flatpak and bubblewrap need to track each other,
I'm using the git submodule. However, this is a bug and should be fixed,
ideally before flatpak goes into unstable; ideally, this would be done
by contributing a --with-system-bubblewrap configure option upstream.

I am a maintainer of xdg-app, and I intend to act on this myself;
I'm only filing this bug to have it tracked.

    S



More information about the Pkg-utopia-maintainers mailing list