• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Eliminate the -lang recommends (forwarded request 767114 from dimstar)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Package empty /etc/flatpak/remotes.d. (forwarded request 750870 from fcrozat)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Disable LTO (boo#1133124). (forwarded request 697430 from marxin)

• Files Changed
• Browse Source

- Update to verson 1.2.4 (CVE-2019-10063):
  + It has been discovered that the previous fix for CVE-2017-5226,
    which uses seccomp to prevent sandboxed apps from using the
    (dangerous) TIOCSTI ioctl was only incomplete on 64bit arches.
    This is now fixed.
  + seccomp: Only compare the low 32bit of the TIOCSTI ioctl args.
  + Support multiple nvidia cards on the machine
  + Fix support for systems where XDG_RUNTIME_DIR is /var/run which
    is a symlink like gentoo.
  + Fix potential crash when updating apps.
  + flatpak list --arch now works correctly again.
  + Updated translations.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update to version 1.0.6:
  * This release fixes an issue that lets system-wide installed
    applications create setuid root files inside their app dir
    (somewhere in /var/lib/flatpak/app). Setuid support is disabled
    inside flatpaks, so such files are only a risk if the user runs
    them manually outside flatpak. Installing a flatpak system-wide
    needs root access, so this isn't a privilege elevation for
    non-root users.
  * The permissions of the files created by the apply_extra script is
    canonicalized and the script itself is run without any capabilities.
  * Better matching of existing remotes when the local and remote configuration
    differs wrt collection ids.
  * New flatpakrepo DeployCollectionID replaces CollectionID, doing the
    same thing. It is recommended to use this instead because older versions
    of flatpak has bugs in the support of collection ids, and this key
    will only be respected in versions where it works.
  * The X11 socket is now mounted read-only.

- Mark flatpak.sh as %config and move the systemhelper dbus config
  file under /usr
- Remove the flatpak-rpmlintrc file that is no longer needed.

- Make polkit_rules_usability.patch effective by adding a 60- prefix
  to the rules file. This will cause it to be executed before the (forwarded request 657831 from alarrosa)

• Files Changed
• Browse Source