diff --git a/_service b/_service
index 0699114..42c841e 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
https://github.com/flatpak/flatpak.git
git
@PARENT_TAG@
- refs/tags/1.6.2
+ refs/tags/1.6.3
*.tar
diff --git a/flatpak-1.6.2.tar.xz b/flatpak-1.6.2.tar.xz
deleted file mode 100644
index 80c73c2..0000000
--- a/flatpak-1.6.2.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fe43896823f57af6e0c66c7d7006a4ff96443e169cdd791713fb5168dc96c15d
-size 990260
diff --git a/flatpak-1.6.3.tar.xz b/flatpak-1.6.3.tar.xz
new file mode 100644
index 0000000..954be3a
--- /dev/null
+++ b/flatpak-1.6.3.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4757a3d7cdb938d5bf9ad04b662dd7d0915abbedf75cbaff5a1a34654ab01503
+size 991932
diff --git a/flatpak.changes b/flatpak.changes
index a6c1c31..9312ecf 100644
--- a/flatpak.changes
+++ b/flatpak.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Mon Apr 6 09:32:31 UTC 2020 - Antonio Larrosa
+
+- Update to version 1.6.3:
+ + The main change in this version is a fix for a regression in
+ the progress calculation for applications using extra-data.
+ Additionally the bundled version of bubblewrap is updated to
+ 0.4.1 which fixes a security issue in some cases. See
+ GHSA-j2qp-rvxj-43vj for details.
+ + Don't break if users primary gid is not in the nsswitch
+ database
+ + Fix crash in flatpak repair if no remotes are configured
+ + Some updates to the oci authenticator
+ + Retry downloads of extra data
+ + Updated translations.
+
-------------------------------------------------------------------
Sun Feb 16 17:22:44 UTC 2020 - Bjørn Lie
@@ -7,17 +23,20 @@ Sun Feb 16 17:22:44 UTC 2020 - Bjørn Lie
Thu Feb 13 15:57:51 UTC 2020 - Antonio Larrosa
- Update to version 1.6.2:
- + Due to a combination of some behaviour in flatpak and recent versions of
- ostree we at some point lost the use of deltas for the initial install
- case, instead always falling back to a full ostree operation which is
- a lot less efficient for pulls with many small files like a runtime. This
- caused some very slow installs from e.g. flathub, so it's recommended to
- update to this version to get better install performance.
- + We now correctly handle TMPDIR env var overrides when bwrap is setuid
- + Disallow running "flatpak run" under sudo (as it doesn't work and causes issues)
+ + Due to a combination of some behaviour in flatpak and recent
+ versions of ostree we at some point lost the use of deltas for
+ the initial install case, instead always falling back to a full
+ ostree operation which is a lot less efficient for pulls with
+ many small files like a runtime. This caused some very slow
+ installs from e.g. flathub, so it's recommended to update to
+ this version to get better install performance.
+ + We now correctly handle TMPDIR env var overrides when bwrap is
+ setuid
+ + Disallow running "flatpak run" under sudo (as it doesn't work
+ and causes issues)
+ Fix build with older versions of glib
+ Minor documentation updates
- + Updated translations
+ + Updated translations.
-------------------------------------------------------------------
Thu Jan 30 16:56:01 UTC 2020 - Antonio Larrosa
diff --git a/flatpak.spec b/flatpak.spec
index c8f7b70..26f5233 100644
--- a/flatpak.spec
+++ b/flatpak.spec
@@ -32,7 +32,7 @@
%define libname libflatpak0
Name: flatpak
-Version: 1.6.2
+Version: 1.6.3
Release: 0
Summary: OSTree based application bundles management
License: LGPL-2.1-or-later
@@ -42,7 +42,7 @@ Source0: %{name}-%{version}.tar.xz
Source1: system-user-flatpak.conf
Patch0: polkit_rules_usability.patch
BuildRequires: bison
-BuildRequires: bubblewrap >= 0.4.0
+BuildRequires: bubblewrap >= 0.4.1
BuildRequires: docbook-xsl-stylesheets
BuildRequires: gtk-doc
BuildRequires: intltool >= 0.35.0