Sync from SUSE:SLFO:Main xdg-desktop-portal revision 403c8298f5801dcf1d970a4a13a45d99

xdg-desktop-portal.changes

@@ -1,3 +1,204 @@
+-------------------------------------------------------------------
+Sat May 18 15:53:53 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 1.18.4:
+  + Don't allow commandline arrays when the first commandline item
+    starts with whitespace or hyphen. (CVE-2024-32462, boo#1223110)
+  + Do not store device access permission if it returned an error
+  + Fix crash with config files without a default backend set
+- includes changes from 1.18.3:
+  + Don't try to read D-Bus object properties of Request objects on
+    construction
+  + Fix various memory and file descriptor leaks.
+  + Minuscule optimization to the ScreenCast portal so that it
+    stores restoration data with a single D-Bus call, instead of two.
+  + Fix a crash in the OpenURI file when trying to open a non-
+    existing file
+  + Fix a bug in PipeWire that prevented cameras from being
+    reported reliably.
+  + Various smaller bug fixes.
+
+-------------------------------------------------------------------
+Fri Jan 12 12:48:49 UTC 2024 - Callum Farmer <gmbr3@opensuse.org>
+
+- Also own the packaging directory used by portals themselves
+
+-------------------------------------------------------------------
+Fri Dec  1 12:15:24 UTC 2023 - Callum Farmer <gmbr3@opensuse.org>
+
+- Own the directory which packages will use for portals.conf
+  configuration files
+
+-------------------------------------------------------------------
+Thu Nov 23 17:09:58 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 1.18.2:
+  + Pass the token to the OpenURI portal and, when missing, an
+    empty string.
+  + Fix various memory and file descriptor leaks in the Document
+    portal.
+  + Make files and folders openend with the Document portal close
+    properly. This should fix cases where the Document portal
+    prevented external devices from unmounting, due to files inside
+    them not getting closed after applications stop using them.
+  + Implement FUSE getlk and setlk callbacks.This should enable
+    using sqlite3 through the Document portal.
+  + Properly resolve fd symlinks before opening them with
+    O_NOFOLLOW.
+  + Fix cases where the portal id is assumed to match the .desktop
+    file name.
+  + Allow sending directories in the file transfer portal. This
+    should make it possible to, among other things, drag and drop
+    folders and files simultaneously from and to sandboxed
+    applications.
+  + Fallback to a hardcoded check to xdg-desktop-portal-gtk in the
+    absence of any other portal or configuration file, as a last
+    resort mechanism.
+  + Various smaller fixes to the build system.
+
+-------------------------------------------------------------------
+Thu Oct 26 18:10:50 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 1.18.1:
+  + Communicate better when the Background portal kills an app.
+  + Properly quote Flatpak command in the Background portal.
+  + Improve documentation of the "cursor_mode" propery of the
+    ScreenCast backend D-Bus interface.
+  + Fix ScreenCast portal removing transient restore permissions
+    too early. This fixes screen sharing dialogs on Chromium asking
+    for the screen multiple times.
+  + Only send the Closed session signal to the sender.
+  + Add Meson options to disable building with Bubblewrap, and
+    without the Flatpak portal documentation. Disabling Bubblewrap
+    is highly discouraged, and only meant to be used on platforms
+    that do not currently support it. By disabling Bubblewrap,
+    bitmap validation happens without a sandbox, which is highly
+    insecure since image parsing is a common source of exploits.
+    Really, just do not disable Bubblewrap please.
+  + Improve the manpage of portals.conf.
+  + Various spelling fixes to the Document portal.
+  + Add a new website! We don't have a fancy domain yet, but the
+    website can be accessed at
+    https://flatpak.github.io/xdg-desktop-portal/
+  + Improve pid mapping for host system apps. This should get rid
+    of some rare, unnecessary warnings.
+  + Adjust documentation of Global Shortcuts portal's timestamps to
+    millisecond granularity.
+  + Bump minimum Meson version to 0.58.
+
+-------------------------------------------------------------------
+Tue Oct  3 12:20:53 UTC 2023 - Antonio Larrosa <alarrosa@suse.com>
+
+- Support building with meson 0.61.x used by SLE, where .pc files
+  in dataonly packages are installed to %_libdir unlike in
+  meson >= 0.62.0 where the default was changed to %_datadir.
+
+-------------------------------------------------------------------
+Mon Sep 18 19:45:54 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 1.18.0:
+  + Highlights:
+    - A new config-based portal matching mechanism that gives
+      preciser control over which portal backends are picked for
+      each portal.
+    - New portals: Clipboard and Input Capture.
+    - The settings portal now documents an 'accent-color' key.
+  + New portal APIs:
+    - Introduce a new Clipboard portal. This portal extends the
+      Remote Desktop portal by adding support for sharing clipboard
+      between remote machines.
+    - Introduce a new Input Capture portal. This portal adds
+      mechanisms for taking control of input devices. The primary
+      usage model is centered around the InputLeap and Synergy use
+      cases, where local devices are used to control remote
+      displays.
+    - Add an "accept-label" option the the Print portal. This lets
+      apps suggest a proper label to the print operation.
+    - Document a new 'accent-color' key in the Settings portal.
+      This key represents an arbitrary color in sRGB colorspace.
+      How implementations of the portal provide this key is
+      entirely dependent on their internal policies and design.
+    - Support restoring remote desktop sessions.
+    - Introduce the ReadOne() method in the Settings portal. This
+      method is now preferred over the Read() method, as Read()
+      mistakenly returned a variant inside a variant. The Read()
+      method will continue to exist for compatibility with existing
+      apps, but its usage is deprecated. We recommend apps to port
+      to the ReadOne() method. Apps can decide whether to use
+      ReadOne() or Read() by looking at the version of the Settings
+      portal.
+  + Changes that might be relevant for distributors:
+    - Rework how portal implementations are loaded. This new, more
+      robust system allows selecting specific backends for specific
+      portals, and layering them when necessary. Platforms that
+      provide portals implementation are encouraged to provide a
+      suitable configuration file.
+    - Drop the Autotools build. Meson is now the only supported
+      build system.
+    - The PipeWire dependency is now mandatory.
+    - Bump GLib dependency to 2.66.
+  + Misc changes:
+    - Improve robustness of the OpenURI portal by validating more
+      URIs.
+    - Various small visual tweaks to the generated documentation.
+    - Various fixes to the Global Shortcuts portal.
+    - Stop using the deprecated GTimeVal struct.
+    - Document xdg-desktop-portal versioning scheme.
+    - Fix various issues in the OpenURI portal.
+    - Bump interface version of the Printer portal to 2.
+    - Validate addresses following the HTML specs in the Email
+      portal.
+    - Document minimum version of the new ReadOne() method of the
+      Settings portal.
+    - Add a mapping id property to the ScreenCast portal.
+    - Add activation token parameter to the Email portal.
+    - Test tarball generation in CI.
+    - Updated translations.
+- Add docutils BuildRequires: New dependency.
+
+-------------------------------------------------------------------
+Wed Aug  9 10:53:54 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 1.17.0:
+  + Drop the Autotools build. Meson is now the only supported build
+    system.
+  + Rework how portal implementations are loaded. This new, more
+    robust system allows selecting specific backends for specific
+    portals, and layering them when necessary. Platforms that
+    provide portals implementation are encouraged to provide a
+    suitable configuration file.
+  + Introduce a new Clipboard portal. This portal extends the
+    Remote Desktop portal by adding support for sharing clipboard
+    between remote machines.
+  + Introduce a new Input Capture portal. This portal adds
+    mechanisms for taking control of input devices. The primary
+    usage model is centered around the InputLeap and Synergy use
+    cases, where local devices are used to control remote displays.
+  + Stop using the deprecated GTimeVal struct
+  + Bump GLib dependency to 2.66
+  + Add an "accept-label" option the the Print portal. This lets
+    apps suggest a proper label to the print operation.
+  + Various fixes to the Global Shortcuts portal.
+  + Support restoring remote desktop sessions.
+  + Improve robustness of the OpenURI portal by validating more
+    URIs.
+  + The PipeWire dependency is now mandatory.
+  + Various improvements for the test suite.
+  + Updated translations.
+- Drop 0001-portal-impl-Only-return-found-implementation-if-it-launched.patch
+  fixed upstream.
+- Switch to meson buildsystem following upstream changes. Add meson
+  BuildRequires and macros.
+
+-------------------------------------------------------------------
+Fri Jun 23 09:54:14 UTC 2023 - Antonio Larrosa <alarrosa@suse.com>
+
+- Add patch from upstream to avoid creating portals with
+  non-functional backends . This was mentioned in bsc#1212037 and
+  since I included this fix in the SP4 update that fixed the issue,
+  I'm fixing this in Factory/SP5 too for consistentcy.
+  * 0001-portal-impl-Only-return-found-implementation-if-it-launched.patch
+
 -------------------------------------------------------------------
 Tue Dec 13 08:23:42 UTC 2022 - Bjørn Lie <bjorn.lie@gmail.com>
 

xdg-desktop-portal.spec

@@ -1,7 +1,8 @@
 #
 # spec file for package xdg-desktop-portal
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +18,7 @@
 
 
 Name:           xdg-desktop-portal
-Version:        1.16.0
+Version:        1.18.4
 Release:        0
 Summary:        A portal frontend service for Flatpak
 License:        LGPL-2.1-or-later
@@ -25,7 +26,8 @@ Group:          System/Libraries
 URL:            https://github.com/flatpak/xdg-desktop-portal
 Source0:        %{url}/releases/download/%{version}/%{name}-%{version}.tar.xz
 
-BuildRequires:  libtool
+BuildRequires:  docutils
+BuildRequires:  meson >= 0.58
 BuildRequires:  pkgconfig
 BuildRequires:  systemd-rpm-macros
 BuildRequires:  xmlto
@@ -73,18 +75,17 @@ This package contains convenience files for developers.
 %autosetup -p1
 
 %build
-export LANG=C.UTF-8
+%meson \
-autoreconf -fiv
+	-Dpytest=disabled \
-%configure \
-	--enable-geoclue \
-	--enable-pipewire \
-	--docdir=%{_defaultdocdir}/%{name} \
 	%{nil}
-%make_build
+%meson_build
 
 %install
-export LANG=C.UTF-8
+%meson_install
-%make_install
+
+# own the packaging directories
+install -d %{buildroot}%{_datadir}/xdg-desktop-portal/portals
+
 %find_lang %{name} %{?no_lang_C}
 
 %post
@@ -102,6 +103,8 @@ export LANG=C.UTF-8
 %{_datadir}/dbus-1/services/org.freedesktop.impl.portal.PermissionStore.service
 %{_datadir}/dbus-1/services/org.freedesktop.portal.Desktop.service
 %{_datadir}/dbus-1/services/org.freedesktop.portal.Documents.service
+%dir %{_datadir}/%{name}
+%dir %{_datadir}/%{name}/portals
 %{_libexecdir}/%{name}
 %{_libexecdir}/xdg-desktop-portal-validate-icon
 %{_libexecdir}/xdg-document-portal
@@ -111,11 +114,18 @@ export LANG=C.UTF-8
 %{_userunitdir}/xdg-document-portal.service
 %{_userunitdir}/xdg-permission-store.service
 %{_userunitdir}/xdg-desktop-portal-rewrite-launchers.service
+%{_mandir}/man5/portals.conf.5%{?ext_man}
 
 %files devel
-%doc %{_defaultdocdir}/%{name}/
+%license COPYING
+%doc %{_datadir}/doc/%{name}/
+%if %{pkg_vcmp meson < 0.62.0 }
+%{_libdir}/pkgconfig/%{name}.pc
+%else
 %{_datadir}/pkgconfig/%{name}.pc
+%endif
 
 %files lang -f %{name}.lang
+%license COPYING
 
 %changelog