Your message dated Tue, 15 Sep 2026 00:06:42 +0000
with message-id <[email protected]>
and subject line Bug#1147562: fixed in flatpak-builder 1.4.11-1
has caused the Debian Bug report #1147562,
regarding flatpak-builder: autopkgtests fail with appstream 1.2.0
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1147562: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1147562
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: flatpak-builder
Version: 1.4.10-1
Severity: serious
Control: affects -1 src:appstream
Tags; forky sid
X-Debbugs-CC: [email protected]
flatpak-builder's autopkgtests are failing with appstream 1.2.0 in Unstable.
https://ci.debian.net/packages/f/flatpak-builder/testing/amd64
Thank you,
Jeremy Bícha
--- End Message ---
--- Begin Message ---
Source: flatpak-builder
Source-Version: 1.4.11-1
Done: Simon McVittie <[email protected]>
We believe that the bug you reported is fixed in the latest version of
flatpak-builder, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Simon McVittie <[email protected]> (supplier of updated flatpak-builder package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 15 Sep 2026 00:37:58 +0100
Source: flatpak-builder
Architecture: source
Version: 1.4.11-1
Distribution: unstable
Urgency: high
Maintainer: Utopia Maintenance Team
<[email protected]>
Changed-By: Simon McVittie <[email protected]>
Closes: 1147562 1147700 1147701
Changes:
flatpak-builder (1.4.11-1) unstable; urgency=high
.
* New upstream security fix release
- Disable git hooks when extracting module source
(CVE-2026-86320, GHSA-j5p8-jgjc-f3xv) (Closes: #1147700)
- Prevent file:// path traversal when run with --sandbox
(no known CVE ID, GHSA-484h-v688-jq5j) (Closes: #1147701)
* d/p/test-builder.sh-Allow-Appstream-icons-to-be-in-PNG-or-JPE.patch:
Add proposed patch to fix test failure with appstream 1.2.0
(Closes: #1147562)
* Standards-Version: 4.7.4
- Remove Priority: optional, no longer necessary
Checksums-Sha1:
1a7389121e4272353d7e3253fd73148792b0bc75 2907 flatpak-builder_1.4.11-1.dsc
58c7ed971c63fc03c9be93cd4e0c9a8f6738bf4a 631656
flatpak-builder_1.4.11.orig.tar.xz
4a02bcd2d2f62e0ef6fccc11a10f66d1d8fd8b43 9696
flatpak-builder_1.4.11-1.debian.tar.xz
24d5c294c6a8f955f0bf95b2755a703908fba705 1411312
flatpak-builder_1.4.11-1.git.tar.xz
6d2cd9c2678729b89f0972403a004b87a0732a86 17704
flatpak-builder_1.4.11-1_source.buildinfo
Checksums-Sha256:
c39fad306a616dc3dae244addc4ba0c1f9e2b7f140da6653e66a83bccea96d5f 2907
flatpak-builder_1.4.11-1.dsc
2a5ef4f3eaea86f808aa477e57e65b6f68978eb1c034fafe05bffdebbf1dcd03 631656
flatpak-builder_1.4.11.orig.tar.xz
f4a3ca80d887a91fcf67513e563609440bd75bbe160cf34393a0170ebff3d55e 9696
flatpak-builder_1.4.11-1.debian.tar.xz
d343cbe47fd55b2707bea3ac16ba239b3b2c026deb9966a36a9f7bef92eb5db8 1411312
flatpak-builder_1.4.11-1.git.tar.xz
a3e1516a832dd7ed7dc59b7722af55a781fe9788d689552efc882934088dd2e8 17704
flatpak-builder_1.4.11-1_source.buildinfo
Files:
edfaab4e2b863095e69b61769ba60859 2907 devel optional
flatpak-builder_1.4.11-1.dsc
8b51e4b68a3e09321e7d58181aeb4701 631656 devel optional
flatpak-builder_1.4.11.orig.tar.xz
c45f50401bc7473da46c022bdecd0fea 9696 devel optional
flatpak-builder_1.4.11-1.debian.tar.xz
eb30d3fb55afdc296a733dd5288659c4 1411312 devel None
flatpak-builder_1.4.11-1.git.tar.xz
67e9aac0adaa20db13a291a4ff01cc15 17704 devel optional
flatpak-builder_1.4.11-1_source.buildinfo
Git-Tag-Info: tag=a7bd269a01a129cdbaa22fe07701f57e31c6183b
fp=7a073ad1ae694fa25bff62e5235c099d3eb33076
Git-Tag-Tagger: Simon McVittie <[email protected]>
-----BEGIN PGP SIGNATURE-----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=BWf5
-----END PGP SIGNATURE-----
pgpKfLywFOOUm.pgp
Description: PGP signature
--- End Message ---
