Accepting request 769117 from GNOME:Factory

OBS-URL: https://build.opensuse.org/request/show/769117
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/flatpak?expand=0&rev=40

_service

@@ -4,7 +4,7 @@
     <param name="url">https://github.com/flatpak/flatpak.git</param>
     <param name="scm">git</param>
     <param name="versionformat">@PARENT_TAG@</param>
-    <param name="revision">refs/tags/1.6.0</param>
+    <param name="revision">refs/tags/1.6.1</param>
   </service>
   <service name="recompress" mode="disabled">
     <param name="file">*.tar</param>

flatpak-1.6.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1376e4fe3f9c7594a4534d01d5331a38a3e71392c9a46d529130386529ae3ae0
-size 971432

flatpak-1.6.1.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2b3cba5ae13c988f318adcd15a0dd16c403c0d99c2aceb7a8a4ad76969485f77
+size 973940

flatpak.changes

@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Thu Jan 30 16:56:01 UTC 2020 - Antonio Larrosa <alarrosa@suse.com>
+
+- Update to version 1.6.1:
+  + This is a (mild) security update. Flatpak 1.6.0 added the
+    ability for an application to request it to be updated, as long
+    as the new version doesn't require new permissions.
+    Unfortunately in some special cases, if an app had access to
+    the home directory, but not the rest of the filesystem it would
+    still allow a self-update where the new version could access
+    some files outside the home directory.
+  + New permission --device=shm giving access to host /dev/shm, as
+    needed for jack.
+  + Generated correct download size in build-commit-from
+  + sub-sandbox now allows the child to share the gpu of the caller
+    has full device access
+  + Fix crash with disabled remotes
+  + Fix builds with older versions of glib
+  + Updated translations.
+
 -------------------------------------------------------------------
 Sat Jan 25 14:07:31 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
 

flatpak.spec

@@ -32,7 +32,7 @@
 
 %define libname libflatpak0
 Name:           flatpak
-Version:        1.6.0
+Version:        1.6.1
 Release:        0
 Summary:        OSTree based application bundles management
 License:        LGPL-2.1-or-later