Debian Bug report logs - #824647
xdg-app/flatpak: should use system version of bubblewrap

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Simon McVittie <smcv@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: xdg-app/flatpak: should use system version of bubblewrap

Date: Wed, 18 May 2016 13:07:02 +0100

Package: xdg-app
Version: 0.5.2-1
Severity: important
Control: block -1 by 824646
X-Debbugs-Cc: bubblewrap@packages.debian.org

(Justification for severity: embedded code copy of security-sensitive code.)

xdg-app has been renamed to Flatpak, which I'm going to upload soon.
In Flatpak, the former xdg-app-helper binary has been spun off into a
separate project, bubblewrap, which is already packaged in Debian.
Flatpak uses bubblewrap as a git submodule rather than using a system
copy.

For the moment, at least until we get a better idea of how closely the
version numbers of flatpak and bubblewrap need to track each other,
I'm using the git submodule. However, this is a bug and should be fixed,
ideally before flatpak goes into unstable; ideally, this would be done
by contributing a --with-system-bubblewrap configure option upstream.

I am a maintainer of xdg-app, and I intend to act on this myself;
I'm only filing this bug to have it tracked.

    S

Message #22 received at 824647-close@bugs.debian.org (full text, mbox, reply):

From: Simon McVittie <smcv@debian.org>

To: 824647-close@bugs.debian.org

Subject: Bug#824647: fixed in flatpak 0.6.7-1

Date: Wed, 06 Jul 2016 12:19:06 +0000

Source: flatpak
Source-Version: 0.6.7-1

We believe that the bug you reported is fixed in the latest version of
flatpak, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 824647@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon McVittie <smcv@debian.org> (supplier of updated flatpak package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 06 Jul 2016 12:45:03 +0100
Source: flatpak
Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0
Architecture: source
Version: 0.6.7-1
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 flatpak    - Application deployment framework for desktop apps
 flatpak-builder - Flatpak application building helper
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection)
 libflatpak-dev - Application deployment framework for desktop apps (development)
 libflatpak-doc - Application deployment framework for desktop apps (documentation)
 libflatpak0 - Application deployment framework for desktop apps (library)
Closes: 824647
Changes:
 flatpak (0.6.7-1) unstable; urgency=medium
 .
   * New upstream release
     - drop all patches except d/p/debian/*, applied upstream
     - d/libflatpak0.symbols: update for new ABIs
     - d/control: depend and build-depend on OSTree 2016.6
     - d/tests/control: flatpak-builder test now needs git
   * Depend on system bubblewrap (Closes: #824647)
   * Remove obsolete note about requiring unprivileged user namespaces
   * d/p/build-run-install-test-data-hook-even-if-using-system-bwr.patch:
     add patch to fix installed-tests with system bwrap
Checksums-Sha1:
 3bb1dc764ede9a0e13163fff30d555434257f0b0 2883 flatpak_0.6.7-1.dsc
 4f5983c84129a1ba79a1ffacaf91ceebb5226bf6 576288 flatpak_0.6.7.orig.tar.xz
 a2225c3400dd7fd8ad2ef48062eb2484b6c8e463 12084 flatpak_0.6.7-1.debian.tar.xz
Checksums-Sha256:
 9ef99403181b397fbbaf247ba6927673e1a2241bf910a635c86cb18948365982 2883 flatpak_0.6.7-1.dsc
 a3695279c22df439927ef8cc776d8bf56e331935b5d87446e53a7825c71b955b 576288 flatpak_0.6.7.orig.tar.xz
 f621c351f3c714fe113a6083c709daf2ce9b3f11f0f9821650b2e0b88aa53e3f 12084 flatpak_0.6.7-1.debian.tar.xz
Files:
 973455f2f05f336c6b4da88176cee782 2883 admin optional flatpak_0.6.7-1.dsc
 d9982dec1fe0569b8bd6052fe11903d1 576288 admin optional flatpak_0.6.7.orig.tar.xz
 3782533d6e29f111c0a3fcfc427024f5 12084 admin optional flatpak_0.6.7-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJXfPWTAAoJEE3o/ypjx8yQJuwP/Rt03Wm8a+vkQvZe3QPQI6fU
brS377OKLvpgNaNu6iAoK5PAmlM1fMiX3c8bRzLErhVJW583Jq+Dbp/ODN6ibvOo
Vh1/4UOKyJJVR4fMgHVF94NWh0v4w+Z2ykhhr01xqS7izOsBi8fONbU/Za98u6Pf
0EKloguNfna5B/bRt91LI4DhgnKDh6yKQrrXvtTp5TUco5iZQF+HLFSrQfgNi90K
9liFv2XgeMcXwgcQy6ERmvtV6xhmzY8sKeA2lnnlsVH2CbjmyDn6HPQHA3KuFt4a
zf93rlLk7HVAGG8s3HGzEOo8s3o+VsTVK02KJquxH7CyQ1lQPUobhVF8YicdZRnW
g9Xl1X3pGg6DMwJhKosauYSP0YhBUd4mnbZgjy8GgRV+kVlvgbJQdjgCD/Tot79H
E9JOTUpIES55i7AKjfHwBKyumkP84+LzWtM+R21SmY0S9m6aCAfrDu8Dfnh0r6nz
Z69g7H8o2DVJRuTT/TuY0K8Vgta03O0QG4fApE72g/fkCdABfIq7TbG1QK15d4DN
xEKFh/KO1Zyd1wmXCpD5oekP/Vv+zh6Yz+Pay/OjG+GeKAbe7XrIW9GMN9CWJPrf
j52qidC8UKrTkKThW3S/8F5GiOR+ndfpo790cMF3uTziV4OdGrmlL8sT5fqFb+t0
ArfyRSIjqLmmirxE5zi9
=mlIs
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.