From 615bbf31b1d02c741d02dc2431ce4be84182f59ba58f48e7a9633c095024ea7f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Lie?= Date: Fri, 31 Jan 2020 19:27:01 +0000 Subject: [PATCH] Accepting request 768935 from GNOME:Next New stable release OBS-URL: https://build.opensuse.org/request/show/768935 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=98 --- _service | 2 +- flatpak-1.6.0.tar.xz | 3 --- flatpak-1.6.1.tar.xz | 3 +++ flatpak.changes | 20 ++++++++++++++++++++ flatpak.spec | 2 +- 5 files changed, 25 insertions(+), 5 deletions(-) delete mode 100644 flatpak-1.6.0.tar.xz create mode 100644 flatpak-1.6.1.tar.xz diff --git a/_service b/_service index fd27451..66f7d33 100644 --- a/_service +++ b/_service @@ -4,7 +4,7 @@ https://github.com/flatpak/flatpak.git git @PARENT_TAG@ - refs/tags/1.6.0 + refs/tags/1.6.1 *.tar diff --git a/flatpak-1.6.0.tar.xz b/flatpak-1.6.0.tar.xz deleted file mode 100644 index b46dd98..0000000 --- a/flatpak-1.6.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:1376e4fe3f9c7594a4534d01d5331a38a3e71392c9a46d529130386529ae3ae0 -size 971432 diff --git a/flatpak-1.6.1.tar.xz b/flatpak-1.6.1.tar.xz new file mode 100644 index 0000000..bead706 --- /dev/null +++ b/flatpak-1.6.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2b3cba5ae13c988f318adcd15a0dd16c403c0d99c2aceb7a8a4ad76969485f77 +size 973940 diff --git a/flatpak.changes b/flatpak.changes index 66c6998..47bbb31 100644 --- a/flatpak.changes +++ b/flatpak.changes @@ -1,3 +1,23 @@ +------------------------------------------------------------------- +Thu Jan 30 16:56:01 UTC 2020 - Antonio Larrosa + +- Update to version 1.6.1: + + This is a (mild) security update. Flatpak 1.6.0 added the + ability for an application to request it to be updated, as long + as the new version doesn't require new permissions. + Unfortunately in some special cases, if an app had access to + the home directory, but not the rest of the filesystem it would + still allow a self-update where the new version could access + some files outside the home directory. + + New permission --device=shm giving access to host /dev/shm, as + needed for jack. + + Generated correct download size in build-commit-from + + sub-sandbox now allows the child to share the gpu of the caller + has full device access + + Fix crash with disabled remotes + + Fix builds with older versions of glib + + Updated translations. + ------------------------------------------------------------------- Sat Jan 25 14:07:31 UTC 2020 - Dominique Leuenberger diff --git a/flatpak.spec b/flatpak.spec index d7656f0..3e8cd59 100644 --- a/flatpak.spec +++ b/flatpak.spec @@ -32,7 +32,7 @@ %define libname libflatpak0 Name: flatpak -Version: 1.6.0 +Version: 1.6.1 Release: 0 Summary: OSTree based application bundles management License: LGPL-2.1-or-later