[Pkg-utopia-maintainers] flatpak-builder_1.4.11-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 15 Sep 2026 00:37:58 +0100
Source: flatpak-builder
Architecture: source
Version: 1.4.11-1
Distribution: unstable
Urgency: high
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers at lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv at debian.org>
Closes: 1147562 1147700 1147701
Changes:
 flatpak-builder (1.4.11-1) unstable; urgency=high
 .
   * New upstream security fix release
     - Disable git hooks when extracting module source
       (CVE-2026-86320, GHSA-j5p8-jgjc-f3xv) (Closes: #1147700)
     - Prevent file:// path traversal when run with --sandbox
       (no known CVE ID, GHSA-484h-v688-jq5j) (Closes: #1147701)
   * d/p/test-builder.sh-Allow-Appstream-icons-to-be-in-PNG-or-JPE.patch:
     Add proposed patch to fix test failure with appstream 1.2.0
     (Closes: #1147562)
   * Standards-Version: 4.7.4
     - Remove Priority: optional, no longer necessary
Checksums-Sha1:
 1a7389121e4272353d7e3253fd73148792b0bc75 2907 flatpak-builder_1.4.11-1.dsc
 58c7ed971c63fc03c9be93cd4e0c9a8f6738bf4a 631656 flatpak-builder_1.4.11.orig.tar.xz
 4a02bcd2d2f62e0ef6fccc11a10f66d1d8fd8b43 9696 flatpak-builder_1.4.11-1.debian.tar.xz
 24d5c294c6a8f955f0bf95b2755a703908fba705 1411312 flatpak-builder_1.4.11-1.git.tar.xz
 6d2cd9c2678729b89f0972403a004b87a0732a86 17704 flatpak-builder_1.4.11-1_source.buildinfo
Checksums-Sha256:
 c39fad306a616dc3dae244addc4ba0c1f9e2b7f140da6653e66a83bccea96d5f 2907 flatpak-builder_1.4.11-1.dsc
 2a5ef4f3eaea86f808aa477e57e65b6f68978eb1c034fafe05bffdebbf1dcd03 631656 flatpak-builder_1.4.11.orig.tar.xz
 f4a3ca80d887a91fcf67513e563609440bd75bbe160cf34393a0170ebff3d55e 9696 flatpak-builder_1.4.11-1.debian.tar.xz
 d343cbe47fd55b2707bea3ac16ba239b3b2c026deb9966a36a9f7bef92eb5db8 1411312 flatpak-builder_1.4.11-1.git.tar.xz
 a3e1516a832dd7ed7dc59b7722af55a781fe9788d689552efc882934088dd2e8 17704 flatpak-builder_1.4.11-1_source.buildinfo
Files:
 edfaab4e2b863095e69b61769ba60859 2907 devel optional flatpak-builder_1.4.11-1.dsc
 8b51e4b68a3e09321e7d58181aeb4701 631656 devel optional flatpak-builder_1.4.11.orig.tar.xz
 c45f50401bc7473da46c022bdecd0fea 9696 devel optional flatpak-builder_1.4.11-1.debian.tar.xz
 eb30d3fb55afdc296a733dd5288659c4 1411312 devel None flatpak-builder_1.4.11-1.git.tar.xz
 67e9aac0adaa20db13a291a4ff01cc15 17704 devel optional flatpak-builder_1.4.11-1_source.buildinfo
Git-Tag-Info: tag=a7bd269a01a129cdbaa22fe07701f57e31c6183b fp=7a073ad1ae694fa25bff62e5235c099d3eb33076
Git-Tag-Tagger: Simon McVittie <smcv at debian.org>

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmqohnkACgkQYG0ITkaD
wHnvNhAAr9XQucX5Og2HAj+1ho87NltxGtx5vAtm47lvgdNVNHD4WW+vwoN43MOi
QTVlkxzbK1q0HAB5zZbNFGLuy+WjFizC3QSmc33YUJO5pmzmVCigBWT31MBk0Wz5
XWmiDopVOboHC77xC2qA6/pU57ST3pIU/D1FmFDsGyzcndBeYjiu1iVXoesPSPuY
QwJhzppGyxpY835uSesNzgI3RK98Qisfq3mOx5c/Z/ODfaxZ4RqHJLF54D9F9BlY
iKqcE1+Vs0hFJk42OA8BgSSda6LdlNJhmQKGp/v8Z1MHPnCYJlkhunlGtUwHt6W3
72wWjitbky8H6BgP5w07qdMhXBBb2CThWt/QbmQRNWAek/ug4AfeVHicqgo7SWle
vYxyRUCtX/bSLGG1tDNv9v/+jeEXCBlSYV+8kiGsph3jRMcT7mLC7eaOC8NCki4g
KdQ7w92gg6QSoisjlpKUUmLUm3HsU06gwHjPC5tkdi7ZcTImVlFD/OmjeAFF76PD
LE1mOF5QPsJlYXqHiTO/srExuNuw/5yrjo43IPy4vRzSJgpk3BK0tfomV8YFcBJZ
kYZlnPX5FGPzZWW6U2jatMSmOiaOO5JlIGdTTfGL9WuR83Vvy+DRR6O1WmU0MJTU
NSzyr2nYuHf/8dNi97D22imomthWaD3xRF7WlhfnmYblNVpRS7E=
=BWf5
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20260915/cd8c7f87/attachment.sig>