[Pkg-utopia-maintainers] flatpak_0.8.5-1~bpo8+1_source+binary.changes ACCEPTED into jessie-backports->backports-policy, jessie-backports

Wed Apr 5 11:18:00 UTC 2017

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 04 Apr 2017 10:30:34 +0100
Source: flatpak
Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0
Architecture: all amd64 source
Version: 0.8.5-1~bpo8+1
Distribution: jessie-backports
Urgency: medium
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers at lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv at debian.org>
Description: 
 flatpak    - Application deployment framework for desktop apps
 flatpak-builder - Flatpak application building helper
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection)
 libflatpak0 - Application deployment framework for desktop apps (library)
 libflatpak-dev - Application deployment framework for desktop apps (development)
 libflatpak-doc - Application deployment framework for desktop apps (documentation)
Changes:
 flatpak (0.8.5-1~bpo8+1) jessie-backports; urgency=medium
 .
   * Backport to jessie
     - debian/gbp.conf: adjust for this branch
     - debian/control: (build-)depend on libgtk-3-bin, not
       gtk-update-icon-cache
     - d/p/debian/Try-gtk-3.0-version-of-the-icon-cache-utility-first.patch:
       try to use gtk-update-icon-cache-3.0 before gtk-update-icon-cache
     - d/p/backport/*.patch, d/control: Relax GLib dependency to 2.42
 .
 flatpak (0.8.5-1) unstable; urgency=medium
 .
   * New upstream bugfix release
   * Upstream security fixes:
     - dbus-proxy: Fix a use-after-free (no specific exploit is known)
       and several memory leaks
     - system-helper: Correct the check that was meant to prevent
       unprivileged users from downgrading system-wide-installed apps
     - Do not allow downgrading apps to validly-signed older versions
       unless a specific older version is requested, so that a
       man-in-the-middle cannot cause a downgrade to an older app
       version with a vulnerability
   * Other upstream fixes:
     - Increase GLib build-dependency to 2.44 (in practice this was
       already required, there is a patch in jessie-backports to
       relax this)
     - Collect system extension references from all system directories,
       not just the first that exists (upstream issue 654)
     - Stop using ostree trivial-httpd, which is not available in
       post-stretch ostree (upstream issues 658, 723)
     - Be build-time compatible with post-stretch ostree (upstream
       issue 756)
     - Strip ?query suffix before detecting whether a URI points to a
       .flatpakref or .flatpakrepo file (upstream issue 659)
     - Fix a typo in help output
   * d/tests/control: most tests now require python, for the
     ostree-trivial-httpd replacement
 .
 flatpak (0.8.4-3) unstable; urgency=medium
 .
   * Mark the one remaining patch as applied in 0.9.1
   * Upload to unstable
 .
 flatpak (0.8.4-2) experimental; urgency=medium
 .
   * Explicitly build-depend on automake. Otherwise, the aspcud resolver
     used in experimental sometimes chooses automake1.11 as the best
     solution to dh-autoreconf's dependency on automake | automaken,
     causing FTBFS.
     - Set the dependency to 1.14.1 since flatpak is known to build
       successfully with that version in jessie-backports, whereas older
       versions are not known to work.
 .
 flatpak (0.8.4-1) experimental; urgency=medium
 .
   * New upstream bugfix release
     - Don't add flatpak directories to XDG_DATA_DIRS if already present
     - Do add flatpak directories to XDG_DATA_DIRS if it already has
       a non-default value
     - Improve progress estimates and reporting for UI frontends
     - Fill in many missing options in man pages
     - Support extensions that apply to multiple versions, particularly
       useful for OpenGL drivers
     - Support extensions that do not depend on any specific runtime,
       particularly useful for proprietary OpenGL drivers packaged with
       a static binary helper
     - Various fixes for error checking and crashes
     - Make flatpak_get_system_installations() return an array that owns
       (takes responsibility for freeing) its contents. This is
       technically an ABI break, but it makes this function consistent
       with others that have a similar signature, and nothing in Debian
       uses it yet.
     - Disable spliced reads in the FUSE file system, which don't appear
       to work
     - Make FamilyWild xauth tokens available in the sandbox, not
       just FamilyLocal
     - Fix a misleading message on systems without systemd --user:
       it now disables an optional feature without breaking sandboxing
   * Add patch simplifying profile.d snippet
   * Initially upload to experimental since this is relatively large
     for a stable-branch release
Checksums-Sha1: 
 e0ca0d8817a5b4002f4cf72fa998e8e923e60207 34160 libflatpak-doc_0.8.5-1~bpo8+1_all.deb
 329b56702838440f30c224dc868f70ffa1493413 2963 flatpak_0.8.5-1~bpo8+1.dsc
 f79a2708bea4c6a9609b6294ca75712ff949db4a 20624 flatpak_0.8.5-1~bpo8+1.debian.tar.xz
 6cbefd018cee373c93130618256578956ddba33c 530464 flatpak_0.8.5-1~bpo8+1_amd64.deb
 939080e949970e201f58fdb50ff94ccadf2b1a1a 195256 flatpak-builder_0.8.5-1~bpo8+1_amd64.deb
 b71059a686c32a3366579ea7020f7f67dbbaa604 92166 flatpak-tests_0.8.5-1~bpo8+1_amd64.deb
 1ce12fb27c8fd0857b0b3fb8fcb008353ccb12d6 15990 gir1.2-flatpak-1.0_0.8.5-1~bpo8+1_amd64.deb
 94eba78e8d572f349381a68d74e7ef6051d5a488 27442 libflatpak-dev_0.8.5-1~bpo8+1_amd64.deb
 5ca93e775053d69eb2296b65c4d07eccf75dd592 162098 libflatpak0_0.8.5-1~bpo8+1_amd64.deb
Checksums-Sha256: 
 76c6bfc4c5d20ae1448711455b81d16bfa0238bac2b224b862644562d527b6f5 34160 libflatpak-doc_0.8.5-1~bpo8+1_all.deb
 cc1cbf67136d9ee9807aa442abdddb56fedd4e5551622df9d57bb78fc8284d29 2963 flatpak_0.8.5-1~bpo8+1.dsc
 07a62463160abd0de666b49b043a62af46fc88a3fad235f372b1331b00a53e4d 20624 flatpak_0.8.5-1~bpo8+1.debian.tar.xz
 020d15c74565e71a3a01d63aa59fd62db007a51b5f1e49214fd26abdb694165b 530464 flatpak_0.8.5-1~bpo8+1_amd64.deb
 08203d941f4a94f1aaa2fe9c8ae31c8d461659d110c621383fc07a1d35ac1945 195256 flatpak-builder_0.8.5-1~bpo8+1_amd64.deb
 3dd68d728d341f80d50556dd26e7d6e648a209ea3f841bd29b65a3057b34f52d 92166 flatpak-tests_0.8.5-1~bpo8+1_amd64.deb
 35916a3e4df04d9377cbe706b53e3edede8aa51a2226678f386d7713f604f71b 15990 gir1.2-flatpak-1.0_0.8.5-1~bpo8+1_amd64.deb
 347f50ee697716d3624a186c041106aa880bc25b19301e8c928cda723ebf79c6 27442 libflatpak-dev_0.8.5-1~bpo8+1_amd64.deb
 ff226cc21557ef7953eb4cd3d0995c86ab44129af9e655b04079e781e0b2888f 162098 libflatpak0_0.8.5-1~bpo8+1_amd64.deb
Files: 
 0d019178ecc6ca77c1f8bbb4807f33b1 34160 doc optional libflatpak-doc_0.8.5-1~bpo8+1_all.deb
 d478b4805e9a720f0652755eb62ba742 2963 admin optional flatpak_0.8.5-1~bpo8+1.dsc
 be0c5e3d6f77aa28fd50738011c89699 20624 admin optional flatpak_0.8.5-1~bpo8+1.debian.tar.xz
 4352fb9f8c0355bdad4f220e1e6f5b64 530464 admin optional flatpak_0.8.5-1~bpo8+1_amd64.deb
 5725d12264a22c9ba8512a5e94f206a1 195256 devel optional flatpak-builder_0.8.5-1~bpo8+1_amd64.deb
 93c36e73f76ccaef6c9b50fff4192efa 92166 misc optional flatpak-tests_0.8.5-1~bpo8+1_amd64.deb
 03587b77b321837a7b3041eb4536fcd6 15990 introspection optional gir1.2-flatpak-1.0_0.8.5-1~bpo8+1_amd64.deb
 c9aaa4723c044645db227de0ac5deb56 27442 libdevel optional libflatpak-dev_0.8.5-1~bpo8+1_amd64.deb
 f66111c37d563d91152d98c010143f42 162098 libs optional libflatpak0_0.8.5-1~bpo8+1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=4G7/
-----END PGP SIGNATURE-----

Thank you for your contribution to Debian.