Hello community,
here is the log from the commit of package flatpak for openSUSE:Leap:15.2
checked in at 2020-01-30 14:50:31
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2/flatpak (Old)
and /work/SRC/openSUSE:Leap:15.2/.flatpak.new.26092 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "flatpak"
Thu Jan 30 14:50:31 2020 rev:38 rq:766111 version:1.6.0
Changes:
--------
--- /work/SRC/openSUSE:Leap:15.2/flatpak/flatpak.changes 2020-01-15
14:55:16.421583535 +0100
+++ /work/SRC/openSUSE:Leap:15.2/.flatpak.new.26092/flatpak.changes
2020-01-30 14:51:40.794943294 +0100
@@ -2 +2 @@
-Thu Mar 28 16:28:17 UTC 2019 - Antonio Larrosa <alarr...@suse.com>
+Tue Jan 14 11:23:06 UTC 2020 - Antonio Larrosa <alarr...@suse.com>
@@ -4,3 +4,162 @@
-- Add upstream patch to fix a sandbox bypass using the TIOCSTI ioctl
- (boo#1130637, CVE-2019-10063, gh#flatpak/flatpak#2782)
- * 0001-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch
+- Update dependencies required by flatpak 1.6.0 .
+- Require xdg-dbus-proxy instead of building the (outdated)
+ builtin version.
+
+-------------------------------------------------------------------
+Mon Dec 30 10:00:24 UTC 2019 - Dominique Leuenberger <dims...@opensuse.org>
+
+- Change %_prefix/lib to %_libexecdir: Makefile installs the file
+ explicitly into libexecdir. Let's be ready in case this path is
+ going to change.
+
+-------------------------------------------------------------------
+Fri Dec 27 10:23:14 UTC 2019 - Dominique Leuenberger <dims...@opensuse.org>
+
+- Co-own /usr/lib/systemd/user-environment-generators. We don't
+ want to forcibly pull in systemd into the buildroot just to own
+ this directory.
+
+-------------------------------------------------------------------
+Fri Dec 20 22:44:39 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 1.6.0:
+ + This is the first stable release in the 1.6 series, main
+ changes since 1.4 is the support for protected content and
+ improvements in the self-sandboxing support.
+ + There is one change in the support for OCI remotes, we now only
+ support the use of labels, not annotations, as labels work with
+ more registries. This means pre-existing OCI flatpak registries
+ (like fedora) may need some changes.
+ + New permissions --socket=cups for direct cups access.
+ + Fix some leaks.
+ + Fix reporting of progress with latest version of ostree.
+ + New no-interaction flag for authenticators.
+ + Support for auto-installing authenticators from a flatpak
+ remote.
+ + Warn less about unset XDG_DATA_DIRS.
+ + Don't poll for updates in the portal when on a metered
+ connection.
+- Modernize spec with current macros.
+
+-------------------------------------------------------------------
+Mon Nov 25 16:59:29 UTC 2019 - Frederic Crozat <fcro...@suse.com>
+
+- Package empty /etc/flatpak/remotes.d.
+
+-------------------------------------------------------------------
+Wed Nov 20 12:53:08 UTC 2019 - Dominique Leuenberger <dims...@opensuse.org>
+
+- Add pkgconfig(libsystemd) BuildRequires (boo#1157126).
+- Drop systemd_requires: strictly speaking, we do not require
+ systemd.
+
+-------------------------------------------------------------------
+Mon Oct 21 19:10:42 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 1.4.3:
+ + Fix crash in revokefs.
+ + Handle 'versions' extension key (in addition to 'version') when
+ checking for local extensions, which was causing us to
+ uninstall some actually used extensions with uninstall
+ --unused.
+ + The 'required-flatpak' metadata key now supports listing
+ multiple versions to support backported features.
+ + Fix crash with older versions of polkit.
+ + Fix installation of bundles.
+ + Fix crash on deploy error.
+ + Support building bundles of apps installed from a remote.
+ + OCI: Fix handling of locally cached icons.
+ + Fix crash when listing unconfigured remotes.
+ + Ignore differences in trailing slashes for repo uris.
+
+-------------------------------------------------------------------
+Mon Jul 8 12:53:30 UTC 2019 - Dominique Leuenberger <dims...@opensuse.org>
+
+- Add system-user-flatpak.conf: generate a flatpak user for the
+ system helper (boo#1137537).
+
+-------------------------------------------------------------------
+Wed Jul 3 08:27:20 UTC 2019 - Antonio Larrosa <alarr...@suse.com>
+
+- Update to version 1.4.2:
+ * Support extra_data in extensions.
+ * Handle double slashes ("//") in XDG_DATA_DIRS.
+ * Fix detection of local related refs.
+
+-------------------------------------------------------------------
+Thu Jun 14 09:33:16 UTC 2019 - Antonio Larrosa <alarr...@suse.com>
+
+- Add a _dbusconfigdir variable in the spec file so we install the
+ flatpak-system-helper config file in a location actually read by
+ dbus, which didn't support having config files in /usr/share
+ until 1.9.18 (first introduced in SLE15).
+- Remove the systemd environment generator if building with
+ systemd < 233 which doesn't support environment generators.
+- Rename the libflapak-doc.xml file which has a typo in the name
+ upstream.
+- BuildRequire libgpgme-devel, not libqgpgme-devel which is not
+ really needed.
+
+-------------------------------------------------------------------
+Thu Jun 13 23:13:29 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 1.4.1:
+ + There was an accidental ABI break in libflatpak in 1.4.0
+ compared to the 1.2.x ABI which caused crashes in apps like
+ gnome-software.
+ + This has been fixed in this release so it is now ABI compatible
+ with 1.2.x, but NOT compatible with 1.4.0. It is recommended
+ that all distributions that shipped 1.4.0 update to 1.4.1 and
+ rebuild all dependencies of libflatpak.
+ + Make ABI compatible with 1.2.x.
+ + Fix some potential crashes.
+ + Fix some corner case where it was impossible to remove a
+ remote.
+ + Restore support for file: uris in the RuntimeRepo key in
+ flatpakref files.
+ + Updated translations.
+
+-------------------------------------------------------------------
+Wed May 29 07:14:13 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 1.4.0:
+ + This is the new stable series, ending the 1.3.x series. The
+ major changes since the 1.2.x is the improved I/O use for
+ system-installed applications, and the new format for
+ pre-configured remotes.
+
+-------------------------------------------------------------------
+Mon May 13 07:45:05 UTC 2019 - Dominique Leuenberger <dims...@opensuse.org>
+
+- Replace systemd-gtk BuildRequires with pkgconfig(systemd): make
+ the build cheaper by not having to wait for the 'real' systemd
+ package to have built, but allow to use systemd-mini. The change
+ in the stack causing this was polkit dropping its hard dep on
+ systemd.
+
+-------------------------------------------------------------------
+Sat May 11 20:53:45 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Add systemd-gtk BuildRequires: Needed now after changes elsewhere
+ in the stack.
+
+-------------------------------------------------------------------
+Wed Apr 24 09:45:40 UTC 2019 - Martin Liška <mli...@suse.cz>
+
+- Disable LTO (boo#1133124).
+
+-------------------------------------------------------------------
+Thu Mar 28 13:05:50 UTC 2019 - Andrei Dziahel <devel...@develop7.info>
+
+- Update to verson 1.2.4 (CVE-2019-10063):
+ + It has been discovered that the previous fix for CVE-2017-5226,
+ which uses seccomp to prevent sandboxed apps from using the
+ (dangerous) TIOCSTI ioctl was only incomplete on 64bit arches.
+ This is now fixed (boo#1130637, gh#flatpak/flatpak#2782).
+ + seccomp: Only compare the low 32bit of the TIOCSTI ioctl args.
+ + Support multiple nvidia cards on the machine
+ + Fix support for systems where XDG_RUNTIME_DIR is /var/run which
+ is a symlink like gentoo.
+ + Fix potential crash when updating apps.
+ + flatpak list --arch now works correctly again.
+ + Updated translations.
Old:
----
0001-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch
flatpak-1.2.3.tar.xz
New:
----
flatpak-1.6.0.tar.xz
system-user-flatpak.conf
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ flatpak.spec ++++++
--- /var/tmp/diff_new_pack.1xkcMq/_old 2020-01-30 14:51:41.250943537 +0100
+++ /var/tmp/diff_new_pack.1xkcMq/_new 2020-01-30 14:51:41.254943538 +0100
@@ -1,7 +1,7 @@
#
# spec file for package flatpak
#
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -16,27 +16,43 @@
#
+# dbus only used config files in /etc until 1.9.18
+%if %{pkg_vcmp dbus-1 < 1.9.18}
+%define _dbusconfigdir %{_sysconfdir}/dbus-1/system.d
+%else
+%define _dbusconfigdir %{_datadir}/dbus-1/system.d
+%endif
+
+# systemd only supports environment generators since version 233
+%if %{pkg_vcmp systemd < 233}
+%define support_environment_generators 0
+%else
+%define support_environment_generators 1
+%endif
+
%define libname libflatpak0
Name: flatpak
-Version: 1.2.3
+Version: 1.6.0
Release: 0
Summary: OSTree based application bundles management
License: LGPL-2.1-or-later
Group: System/Packages
URL: https://flatpak.github.io/
-Source: %{name}-%{version}.tar.xz
+Source0: %{name}-%{version}.tar.xz
+Source1: system-user-flatpak.conf
Patch0: polkit_rules_usability.patch
-Patch1:
0001-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch
BuildRequires: bison
-BuildRequires: bubblewrap >= 0.2.1
+BuildRequires: bubblewrap >= 0.4.0
BuildRequires: docbook-xsl-stylesheets
BuildRequires: gtk-doc
BuildRequires: intltool >= 0.35.0
BuildRequires: libcap-devel
BuildRequires: libdwarf-devel
-BuildRequires: libqgpgme-devel >= 1.1.8
+BuildRequires: libgpgme-devel >= 1.1.8
BuildRequires: libtool
BuildRequires: pkgconfig
+BuildRequires: sysuser-tools
+BuildRequires: xdg-dbus-proxy >= 0.1.0
BuildRequires: xsltproc
BuildRequires: pkgconfig(appstream-glib)
BuildRequires: pkgconfig(dconf)
@@ -51,24 +67,36 @@
BuildRequires: pkgconfig(libelf) >= 0.8.12
BuildRequires: pkgconfig(libseccomp)
BuildRequires: pkgconfig(libsoup-2.4)
-BuildRequires: pkgconfig(ostree-1) >= 2018.7
+BuildRequires: pkgconfig(libsystemd)
+BuildRequires: pkgconfig(ostree-1) >= 2018.9
BuildRequires: pkgconfig(polkit-gobject-1)
+BuildRequires: pkgconfig(systemd)
BuildRequires: pkgconfig(xau)
Requires: %{libname} = %{version}
-Requires: bubblewrap >= 0.2.1
-Requires: ostree >= 2018.7
+Requires: bubblewrap >= 0.4.0
+Requires: ostree >= 2018.9
+Requires: xdg-dbus-proxy >= 0.1.0
Requires: xdg-desktop-portal >= 0.10
+Requires: user(flatpak)
Recommends: %{name}-lang = %{version}
# Remove after openSUSE Leap 42 is out of scope
Provides: xdg-app = %{version}
Obsoletes: xdg-app < %{version}
-%{?systemd_requires}
%description
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
+%package -n system-user-flatpak
+Summary: System user for the flatpak system helper
+Group: System/Base
+%sysusers_requires
+
+%description -n system-user-flatpak
+System user for the flatpak system helper.
+
+
%package -n %{libname}
Summary: OSTree based application bundle management library
Group: System/Libraries
@@ -114,12 +142,11 @@
%lang_package
%prep
-%setup -q
-%patch0 -p1
-%patch1 -p1
+%autosetup -p1
sed -i -e '1s,#!%{_bindir}/env python3,#!%{_bindir}/python3,' scripts/flatpak-*
%build
+%define _lto_cflags %{nil}
NOCONFIGURE=1 ./autogen.sh
%configure \
--disable-silent-rules \
@@ -127,8 +154,11 @@
--disable-document-portal \
--with-system-bubblewrap \
--with-priv-mode=none \
- --with-dbus-config-dir=%{_datadir}/dbus-1/system.d
-make %{?_smp_mflags}
+ --with-dbus-config-dir=%{_dbusconfigdir} \
+ --with-system-dbus-proxy=%{_bindir}/xdg-dbus-proxy \
+ %{nil}
+%make_build
+%sysusers_generate_pre %{SOURCE1} system-user-flatpak
%install
%make_install
@@ -142,8 +172,19 @@
# w/o password entry.
mv
%{buildroot}/%{_datadir}/polkit-1/rules.d/{,60-}org.freedesktop.Flatpak.rules
+mkdir -p %{buildroot}%{_sysusersdir}
+install -m 644 %{SOURCE1} %{buildroot}%{_sysusersdir}/system-user-flatpak.conf
+
+%if !%{support_environment_generators}
+rm -Rf %{buildroot}%{_libexecdir}/systemd/user-environment-generators/
+%endif
+
+mkdir -p %{buildroot}%{_sysconfdir}/flatpak/remotes.d
+
%find_lang %{name}
+%pre -n system-user-flatpak -f system-user-flatpak.pre
+
%post -n %{libname} -p /sbin/ldconfig
%postun -n %{libname} -p /sbin/ldconfig
%pre
@@ -163,11 +204,11 @@
%{_bindir}/flatpak
%{_bindir}/flatpak-bisect
%{_bindir}/flatpak-coredumpctl
-%{_libexecdir}/flatpak-dbus-proxy
%{_libexecdir}/flatpak-portal
%{_libexecdir}/flatpak-session-helper
%{_libexecdir}/flatpak-system-helper
%{_libexecdir}/flatpak-validate-icon
+%{_libexecdir}/revokefs-fuse
%{_datadir}/bash-completion/completions/flatpak
# # Own dirs so we don't have to depend on dbus for building.
%dir %{_datadir}/dbus-1
@@ -178,7 +219,7 @@
%{_datadir}/dbus-1/services/org.freedesktop.Flatpak.service
%{_datadir}/dbus-1/services/org.freedesktop.portal.Flatpak.service
%{_datadir}/dbus-1/system-services/org.freedesktop.Flatpak.SystemHelper.service
-%{_datadir}/dbus-1/system.d/org.freedesktop.Flatpak.SystemHelper.conf
+%{_dbusconfigdir}/org.freedesktop.Flatpak.SystemHelper.conf
# policykit rules
%{_datadir}/polkit-1/actions/org.freedesktop.Flatpak.policy
%{_datadir}/polkit-1/rules.d/60-org.freedesktop.Flatpak.rules
@@ -190,6 +231,7 @@
%{_mandir}/man5/flatpak-remote.5%{ext_man}
%{_datadir}/%{name}/
%config %{_sysconfdir}/profile.d/flatpak.sh
+%{_sysconfdir}/flatpak
# Own dirs so we don't have to depend on gdm for building.
%dir %{_datadir}/gdm/
%dir %{_datadir}/gdm/env.d/
@@ -199,7 +241,17 @@
%{_userunitdir}/flatpak-session-helper.service
%{_userunitdir}/flatpak-portal.service
%ghost %dir %{_localstatedir}/lib/flatpak
+%if %{support_environment_generators}
+%dir %{_libexecdir}/systemd/user-environment-generators
%{_libexecdir}/systemd/user-environment-generators/60-flatpak
+%endif
+%{_libexecdir}/flatpak-oci-authenticator
+%{_userunitdir}/flatpak-oci-authenticator.service
+%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.Authenticator.xml
+%{_datadir}/dbus-1/services/org.flatpak.Authenticator.Oci.service
+
+%files -n system-user-flatpak
+%{_sysusersdir}/system-user-flatpak.conf
%files -n %{libname}
%{_libdir}/libflatpak.so.*
++++++ _service ++++++
--- /var/tmp/diff_new_pack.1xkcMq/_old 2020-01-30 14:51:41.274943549 +0100
+++ /var/tmp/diff_new_pack.1xkcMq/_new 2020-01-30 14:51:41.274943549 +0100
@@ -1,10 +1,10 @@
+<?xml version="1.0"?>
<services>
<service name="tar_scm" mode="disabled">
<param name="url">https://github.com/flatpak/flatpak.git</param>
<param name="scm">git</param>
<param name="versionformat">@PARENT_TAG@</param>
- <param name="changesgenerate">enable</param>
- <param name="revision">refs/tags/1.2.3</param>
+ <param name="revision">refs/tags/1.6.0</param>
</service>
<service name="recompress" mode="disabled">
<param name="file">*.tar</param>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.1xkcMq/_old 2020-01-30 14:51:41.294943560 +0100
+++ /var/tmp/diff_new_pack.1xkcMq/_new 2020-01-30 14:51:41.294943560 +0100
@@ -1,4 +1,4 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://github.com/flatpak/flatpak.git</param>
- <param
name="changesrevision">428c7bf8566d1cdb9f5eafccde1a19a41aeab144</param></service></servicedata>
\ No newline at end of file
+ <param
name="changesrevision">f70978b4ad892cca6837153a3a1f7bc33ac347e8</param></service></servicedata>
++++++ flatpak-1.2.3.tar.xz -> flatpak-1.6.0.tar.xz ++++++
++++ 134547 lines of diff (skipped)
++++++ system-user-flatpak.conf ++++++
# Type Name ID GECOS [HOME]
u flatpak - "User for flatpak system helper"
