Hello community, here is the log from the commit of package flatpak for openSUSE:Leap:15.2 checked in at 2020-01-30 14:50:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/flatpak (Old) and /work/SRC/openSUSE:Leap:15.2/.flatpak.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "flatpak" Thu Jan 30 14:50:31 2020 rev:38 rq:766111 version:1.6.0 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/flatpak/flatpak.changes 2020-01-15 14:55:16.421583535 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.flatpak.new.26092/flatpak.changes 2020-01-30 14:51:40.794943294 +0100 @@ -2 +2 @@ -Thu Mar 28 16:28:17 UTC 2019 - Antonio Larrosa <alarrosa@suse.com> +Tue Jan 14 11:23:06 UTC 2020 - Antonio Larrosa <alarrosa@suse.com> @@ -4,3 +4,162 @@ -- Add upstream patch to fix a sandbox bypass using the TIOCSTI ioctl - (boo#1130637, CVE-2019-10063, gh#flatpak/flatpak#2782) - * 0001-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch +- Update dependencies required by flatpak 1.6.0 . +- Require xdg-dbus-proxy instead of building the (outdated) + builtin version. + +------------------------------------------------------------------- +Mon Dec 30 10:00:24 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org> + +- Change %_prefix/lib to %_libexecdir: Makefile installs the file + explicitly into libexecdir. Let's be ready in case this path is + going to change. + +------------------------------------------------------------------- +Fri Dec 27 10:23:14 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org> + +- Co-own /usr/lib/systemd/user-environment-generators. We don't + want to forcibly pull in systemd into the buildroot just to own + this directory. + +------------------------------------------------------------------- +Fri Dec 20 22:44:39 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com> + +- Update to version 1.6.0: + + This is the first stable release in the 1.6 series, main + changes since 1.4 is the support for protected content and + improvements in the self-sandboxing support. + + There is one change in the support for OCI remotes, we now only + support the use of labels, not annotations, as labels work with + more registries. This means pre-existing OCI flatpak registries + (like fedora) may need some changes. + + New permissions --socket=cups for direct cups access. + + Fix some leaks. + + Fix reporting of progress with latest version of ostree. + + New no-interaction flag for authenticators. + + Support for auto-installing authenticators from a flatpak + remote. + + Warn less about unset XDG_DATA_DIRS. + + Don't poll for updates in the portal when on a metered + connection. +- Modernize spec with current macros. + +------------------------------------------------------------------- +Mon Nov 25 16:59:29 UTC 2019 - Frederic Crozat <fcrozat@suse.com> + +- Package empty /etc/flatpak/remotes.d. + +------------------------------------------------------------------- +Wed Nov 20 12:53:08 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org> + +- Add pkgconfig(libsystemd) BuildRequires (boo#1157126). +- Drop systemd_requires: strictly speaking, we do not require + systemd. + +------------------------------------------------------------------- +Mon Oct 21 19:10:42 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com> + +- Update to version 1.4.3: + + Fix crash in revokefs. + + Handle 'versions' extension key (in addition to 'version') when + checking for local extensions, which was causing us to + uninstall some actually used extensions with uninstall + --unused. + + The 'required-flatpak' metadata key now supports listing + multiple versions to support backported features. + + Fix crash with older versions of polkit. + + Fix installation of bundles. + + Fix crash on deploy error. + + Support building bundles of apps installed from a remote. + + OCI: Fix handling of locally cached icons. + + Fix crash when listing unconfigured remotes. + + Ignore differences in trailing slashes for repo uris. + +------------------------------------------------------------------- +Mon Jul 8 12:53:30 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org> + +- Add system-user-flatpak.conf: generate a flatpak user for the + system helper (boo#1137537). + +------------------------------------------------------------------- +Wed Jul 3 08:27:20 UTC 2019 - Antonio Larrosa <alarrosa@suse.com> + +- Update to version 1.4.2: + * Support extra_data in extensions. + * Handle double slashes ("//") in XDG_DATA_DIRS. + * Fix detection of local related refs. + +------------------------------------------------------------------- +Thu Jun 14 09:33:16 UTC 2019 - Antonio Larrosa <alarrosa@suse.com> + +- Add a _dbusconfigdir variable in the spec file so we install the + flatpak-system-helper config file in a location actually read by + dbus, which didn't support having config files in /usr/share + until 1.9.18 (first introduced in SLE15). +- Remove the systemd environment generator if building with + systemd < 233 which doesn't support environment generators. +- Rename the libflapak-doc.xml file which has a typo in the name + upstream. +- BuildRequire libgpgme-devel, not libqgpgme-devel which is not + really needed. + +------------------------------------------------------------------- +Thu Jun 13 23:13:29 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com> + +- Update to version 1.4.1: + + There was an accidental ABI break in libflatpak in 1.4.0 + compared to the 1.2.x ABI which caused crashes in apps like + gnome-software. + + This has been fixed in this release so it is now ABI compatible + with 1.2.x, but NOT compatible with 1.4.0. It is recommended + that all distributions that shipped 1.4.0 update to 1.4.1 and + rebuild all dependencies of libflatpak. + + Make ABI compatible with 1.2.x. + + Fix some potential crashes. + + Fix some corner case where it was impossible to remove a + remote. + + Restore support for file: uris in the RuntimeRepo key in + flatpakref files. + + Updated translations. + +------------------------------------------------------------------- +Wed May 29 07:14:13 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com> + +- Update to version 1.4.0: + + This is the new stable series, ending the 1.3.x series. The + major changes since the 1.2.x is the improved I/O use for + system-installed applications, and the new format for + pre-configured remotes. + +------------------------------------------------------------------- +Mon May 13 07:45:05 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org> + +- Replace systemd-gtk BuildRequires with pkgconfig(systemd): make + the build cheaper by not having to wait for the 'real' systemd + package to have built, but allow to use systemd-mini. The change + in the stack causing this was polkit dropping its hard dep on + systemd. + +------------------------------------------------------------------- +Sat May 11 20:53:45 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com> + +- Add systemd-gtk BuildRequires: Needed now after changes elsewhere + in the stack. + +------------------------------------------------------------------- +Wed Apr 24 09:45:40 UTC 2019 - Martin Liška <mliska@suse.cz> + +- Disable LTO (boo#1133124). + +------------------------------------------------------------------- +Thu Mar 28 13:05:50 UTC 2019 - Andrei Dziahel <develop7@develop7.info> + +- Update to verson 1.2.4 (CVE-2019-10063): + + It has been discovered that the previous fix for CVE-2017-5226, + which uses seccomp to prevent sandboxed apps from using the + (dangerous) TIOCSTI ioctl was only incomplete on 64bit arches. + This is now fixed (boo#1130637, gh#flatpak/flatpak#2782). + + seccomp: Only compare the low 32bit of the TIOCSTI ioctl args. + + Support multiple nvidia cards on the machine + + Fix support for systems where XDG_RUNTIME_DIR is /var/run which + is a symlink like gentoo. + + Fix potential crash when updating apps. + + flatpak list --arch now works correctly again. + + Updated translations. Old: ---- 0001-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch flatpak-1.2.3.tar.xz New: ---- flatpak-1.6.0.tar.xz system-user-flatpak.conf ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ flatpak.spec ++++++ --- /var/tmp/diff_new_pack.1xkcMq/_old 2020-01-30 14:51:41.250943537 +0100 +++ /var/tmp/diff_new_pack.1xkcMq/_new 2020-01-30 14:51:41.254943538 +0100 @@ -1,7 +1,7 @@ # # spec file for package flatpak # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,27 +16,43 @@ # +# dbus only used config files in /etc until 1.9.18 +%if %{pkg_vcmp dbus-1 < 1.9.18} +%define _dbusconfigdir %{_sysconfdir}/dbus-1/system.d +%else +%define _dbusconfigdir %{_datadir}/dbus-1/system.d +%endif + +# systemd only supports environment generators since version 233 +%if %{pkg_vcmp systemd < 233} +%define support_environment_generators 0 +%else +%define support_environment_generators 1 +%endif + %define libname libflatpak0 Name: flatpak -Version: 1.2.3 +Version: 1.6.0 Release: 0 Summary: OSTree based application bundles management License: LGPL-2.1-or-later Group: System/Packages URL: https://flatpak.github.io/ -Source: %{name}-%{version}.tar.xz +Source0: %{name}-%{version}.tar.xz +Source1: system-user-flatpak.conf Patch0: polkit_rules_usability.patch -Patch1: 0001-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch BuildRequires: bison -BuildRequires: bubblewrap >= 0.2.1 +BuildRequires: bubblewrap >= 0.4.0 BuildRequires: docbook-xsl-stylesheets BuildRequires: gtk-doc BuildRequires: intltool >= 0.35.0 BuildRequires: libcap-devel BuildRequires: libdwarf-devel -BuildRequires: libqgpgme-devel >= 1.1.8 +BuildRequires: libgpgme-devel >= 1.1.8 BuildRequires: libtool BuildRequires: pkgconfig +BuildRequires: sysuser-tools +BuildRequires: xdg-dbus-proxy >= 0.1.0 BuildRequires: xsltproc BuildRequires: pkgconfig(appstream-glib) BuildRequires: pkgconfig(dconf) @@ -51,24 +67,36 @@ BuildRequires: pkgconfig(libelf) >= 0.8.12 BuildRequires: pkgconfig(libseccomp) BuildRequires: pkgconfig(libsoup-2.4) -BuildRequires: pkgconfig(ostree-1) >= 2018.7 +BuildRequires: pkgconfig(libsystemd) +BuildRequires: pkgconfig(ostree-1) >= 2018.9 BuildRequires: pkgconfig(polkit-gobject-1) +BuildRequires: pkgconfig(systemd) BuildRequires: pkgconfig(xau) Requires: %{libname} = %{version} -Requires: bubblewrap >= 0.2.1 -Requires: ostree >= 2018.7 +Requires: bubblewrap >= 0.4.0 +Requires: ostree >= 2018.9 +Requires: xdg-dbus-proxy >= 0.1.0 Requires: xdg-desktop-portal >= 0.10 +Requires: user(flatpak) Recommends: %{name}-lang = %{version} # Remove after openSUSE Leap 42 is out of scope Provides: xdg-app = %{version} Obsoletes: xdg-app < %{version} -%{?systemd_requires} %description flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. +%package -n system-user-flatpak +Summary: System user for the flatpak system helper +Group: System/Base +%sysusers_requires + +%description -n system-user-flatpak +System user for the flatpak system helper. + + %package -n %{libname} Summary: OSTree based application bundle management library Group: System/Libraries @@ -114,12 +142,11 @@ %lang_package %prep -%setup -q -%patch0 -p1 -%patch1 -p1 +%autosetup -p1 sed -i -e '1s,#!%{_bindir}/env python3,#!%{_bindir}/python3,' scripts/flatpak-* %build +%define _lto_cflags %{nil} NOCONFIGURE=1 ./autogen.sh %configure \ --disable-silent-rules \ @@ -127,8 +154,11 @@ --disable-document-portal \ --with-system-bubblewrap \ --with-priv-mode=none \ - --with-dbus-config-dir=%{_datadir}/dbus-1/system.d -make %{?_smp_mflags} + --with-dbus-config-dir=%{_dbusconfigdir} \ + --with-system-dbus-proxy=%{_bindir}/xdg-dbus-proxy \ + %{nil} +%make_build +%sysusers_generate_pre %{SOURCE1} system-user-flatpak %install %make_install @@ -142,8 +172,19 @@ # w/o password entry. mv %{buildroot}/%{_datadir}/polkit-1/rules.d/{,60-}org.freedesktop.Flatpak.rules +mkdir -p %{buildroot}%{_sysusersdir} +install -m 644 %{SOURCE1} %{buildroot}%{_sysusersdir}/system-user-flatpak.conf + +%if !%{support_environment_generators} +rm -Rf %{buildroot}%{_libexecdir}/systemd/user-environment-generators/ +%endif + +mkdir -p %{buildroot}%{_sysconfdir}/flatpak/remotes.d + %find_lang %{name} +%pre -n system-user-flatpak -f system-user-flatpak.pre + %post -n %{libname} -p /sbin/ldconfig %postun -n %{libname} -p /sbin/ldconfig %pre @@ -163,11 +204,11 @@ %{_bindir}/flatpak %{_bindir}/flatpak-bisect %{_bindir}/flatpak-coredumpctl -%{_libexecdir}/flatpak-dbus-proxy %{_libexecdir}/flatpak-portal %{_libexecdir}/flatpak-session-helper %{_libexecdir}/flatpak-system-helper %{_libexecdir}/flatpak-validate-icon +%{_libexecdir}/revokefs-fuse %{_datadir}/bash-completion/completions/flatpak # # Own dirs so we don't have to depend on dbus for building. %dir %{_datadir}/dbus-1 @@ -178,7 +219,7 @@ %{_datadir}/dbus-1/services/org.freedesktop.Flatpak.service %{_datadir}/dbus-1/services/org.freedesktop.portal.Flatpak.service %{_datadir}/dbus-1/system-services/org.freedesktop.Flatpak.SystemHelper.service -%{_datadir}/dbus-1/system.d/org.freedesktop.Flatpak.SystemHelper.conf +%{_dbusconfigdir}/org.freedesktop.Flatpak.SystemHelper.conf # policykit rules %{_datadir}/polkit-1/actions/org.freedesktop.Flatpak.policy %{_datadir}/polkit-1/rules.d/60-org.freedesktop.Flatpak.rules @@ -190,6 +231,7 @@ %{_mandir}/man5/flatpak-remote.5%{ext_man} %{_datadir}/%{name}/ %config %{_sysconfdir}/profile.d/flatpak.sh +%{_sysconfdir}/flatpak # Own dirs so we don't have to depend on gdm for building. %dir %{_datadir}/gdm/ %dir %{_datadir}/gdm/env.d/ @@ -199,7 +241,17 @@ %{_userunitdir}/flatpak-session-helper.service %{_userunitdir}/flatpak-portal.service %ghost %dir %{_localstatedir}/lib/flatpak +%if %{support_environment_generators} +%dir %{_libexecdir}/systemd/user-environment-generators %{_libexecdir}/systemd/user-environment-generators/60-flatpak +%endif +%{_libexecdir}/flatpak-oci-authenticator +%{_userunitdir}/flatpak-oci-authenticator.service +%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.Authenticator.xml +%{_datadir}/dbus-1/services/org.flatpak.Authenticator.Oci.service + +%files -n system-user-flatpak +%{_sysusersdir}/system-user-flatpak.conf %files -n %{libname} %{_libdir}/libflatpak.so.* ++++++ _service ++++++ --- /var/tmp/diff_new_pack.1xkcMq/_old 2020-01-30 14:51:41.274943549 +0100 +++ /var/tmp/diff_new_pack.1xkcMq/_new 2020-01-30 14:51:41.274943549 +0100 @@ -1,10 +1,10 @@ +<?xml version="1.0"?> <services> <service name="tar_scm" mode="disabled"> <param name="url">https://github.com/flatpak/flatpak.git</param> <param name="scm">git</param> <param name="versionformat">@PARENT_TAG@</param> - <param name="changesgenerate">enable</param> - <param name="revision">refs/tags/1.2.3</param> + <param name="revision">refs/tags/1.6.0</param> </service> <service name="recompress" mode="disabled"> <param name="file">*.tar</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.1xkcMq/_old 2020-01-30 14:51:41.294943560 +0100 +++ /var/tmp/diff_new_pack.1xkcMq/_new 2020-01-30 14:51:41.294943560 +0100 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/flatpak/flatpak.git</param> - <param name="changesrevision">428c7bf8566d1cdb9f5eafccde1a19a41aeab144</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">f70978b4ad892cca6837153a3a1f7bc33ac347e8</param></service></servicedata> ++++++ flatpak-1.2.3.tar.xz -> flatpak-1.6.0.tar.xz ++++++ ++++ 134547 lines of diff (skipped) ++++++ system-user-flatpak.conf ++++++ # Type Name ID GECOS [HOME] u flatpak - "User for flatpak system helper"