Your message dated Tue, 31 Mar 2020 12:01:40 +0100
with message-id <[email protected]>
and subject line Re: Bug#940680: Provide backports for Buster
has caused the Debian Bug report #940680,
regarding Provide backports for Buster
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
940680: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940680
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: flatpak
Version: 1.2.4-1
Severity: wishlist
Dear maintainer,
Since the release of freedesktop runtime version 19.08, flatpak attempts
to install org.freedesktop.Platform.openh264 but fails with the
following warning message:
Warning: org.freedesktop.Platform.openh264 needs a later flatpak version
Would you consider providing backports of newer releases of flatpak to
Buster to bypass future issues with new runtimes?
Best regards,
Ghislain
-- System Information:
Debian Release: 10.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-6-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8),
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages flatpak depends on:
ii bubblewrap 0.3.1-4
ii libappstream-glib8 0.7.14-1
ii libarchive13 3.3.3-4
ii libc6 2.28-10
ii libdconf1 0.30.1-2
ii libgdk-pixbuf2.0-0 2.38.1+dfsg-1
ii libglib2.0-0 2.58.3-2+deb10u1
ii libgpgme11 1.12.0-6
ii libjson-glib-1.0-0 1.4.4-2
ii libostree-1-1 2019.1-1
ii libpolkit-agent-1-0 0.105-25
ii libpolkit-gobject-1-0 0.105-25
ii libseccomp2 2.3.3-4
ii libsoup2.4-1 2.64.2-2
ii libsystemd0 241-7~deb10u1
ii libxau6 1:1.0.8-1+b2
ii libxml2 2.9.4+dfsg1-7+b3
ii xdg-dbus-proxy 0.1.1-1
ii xdg-desktop-portal 1.2.0-1
Versions of packages flatpak recommends:
ii desktop-file-utils 0.23-4
ii gtk-update-icon-cache 3.24.5-1
ii hicolor-icon-theme 0.17-2
ii libpam-systemd 241-7~deb10u1
ii p11-kit 0.23.15-2
ii policykit-1 0.105-25
ii shared-mime-info 1.10-1
ii xdg-desktop-portal-gtk [xdg-desktop-portal-backend] 1.2.0-1
Versions of packages flatpak suggests:
ii avahi-daemon 0.7-4+b1
-- no debconf information
--- End Message ---
--- Begin Message ---
On Mon, 23 Sep 2019 at 10:44:08 +0100, Simon McVittie wrote:
> On Thu, 19 Sep 2019 at 00:17:00 +0200, [email protected] wrote:
> > Would you consider providing backports of newer releases of flatpak to
> > Buster to bypass future issues with new runtimes?
>
> I'll probably do a backport eventually, but ideally using backports
> shouldn't be necessary in order to use Flathub, so fixing stable is a
> higher priority for me right now than maintaining backports.
The specific issue you reported is fixed in 1.2.5-0+deb10u1. There is
no formal security support for backports, so I would suggest using the
version from stable if possible.
However, if apps do start requiring features from a strictly newer
version, a backport of 1.6.x (together with matching versions of
xdg-desktop-portal, x-d-p-gtk, libostree and bubblewrap) is also
available.
(Note that the backported bubblewrap 0.4.0 currently has a root privilege
escalation vulnerability in certain kernel configurations. I've uploaded a
fixed version, 0.4.1, but it seems to be in a queue somewhere and isn't
showing up in backports yet.)
smcv
--- End Message ---
