flatpak (0.8.9-0ubuntu0.1) artful-proposed; urgency=medium
* Update to flatpak 0.8.9 (LP: #1752381)
* New upstream release backporting the following fixes from 0.10.x:
- common/flatpak-run.c: Ignore unrecognised permission strings
instead of failing, for forwards compatibility
- dbus-proxy/flatpak-proxy.c: Fix a D-Bus filtering bypass in
flatpak-dbus-proxy (Closes: #888842)
- profile/flatpak.sh.in: Simplify and improve profile.d snippet
(already done in Debian since 0.8.4-1, no practical effect)
- Add compatibility with ostree ≥ 2017.7 (in Debian, the same
changes were already in 0.8.7-2)
- Security: Do not allow legacy eavesdropping on the D-Bus
session bus (Closes: #880451)
- Ensure that LD_LIBRARY_PATH is in the correct order, respecting
extensions' priorities
- Ensure that extensions are mounted in the correct order even if
they have differing priorities, fixing Steam
- Remove PYTHONPATH, PERLLIB, PERL5LIB, XCURSOR_PATH from the
environment given to sandboxed apps
- Give each app a persistent cache directory for fontconfig
- Make /usr/share/icons available in the sandbox so that sandboxed
apps can use the host's icon theme
- Disable debug-level FUSE logging for the document portal
- Make the * wildcard at the end of a D-Bus filtering rule match
zero or more components, so --talk="com.example.Foo.*" behaves
the same as D-Bus' arg0namespace="com.example.Foo". Previously,
it would only match exactly one component. This matches a proposed
design for integrating equivalent filtering into future dbus
versions.
* Drop our patch to profile/flatpak.sh.in, no longer necessary
* debian/control: Update Vcs-* metadata for salsa.d.o migration
* d/watch: Watch for new 0.8.x versions
* d/p/0.8.8/: Drop patches that added compatibility with
ostree ≥ 2017.7, no longer necessary
-- Andrew Hayzen <email address hidden> Tue, 27 Feb 2018 21:11:01 +0000