Your message dated Fri, 10 Apr 2026 12:48:44 +0000
with message-id <[email protected]>
and subject line Bug#1132960: fixed in flatpak 1.16.5-1
has caused the Debian Bug report #1132960,
regarding flatpak: regression after fixing CVE-2026-34078 for users of
com.valvesoftware.Steam app
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1132960: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132960
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: flatpak
Version: 1.16.4-1
Severity: important
Tags: upstream
Forwarded: https://github.com/flatpak/flatpak/issues/6568
`flatpak-spawn --app-path=""` doesn't work as intended after fixing
CVE-2026-34078. A fix has been proposed upstream, I'm reviewing it now.
smcv
--- End Message ---
--- Begin Message ---
Source: flatpak
Source-Version: 1.16.5-1
Done: Simon McVittie <[email protected]>
We believe that the bug you reported is fixed in the latest version of
flatpak, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Simon McVittie <[email protected]> (supplier of updated flatpak package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 10 Apr 2026 12:47:08 +0100
Source: flatpak
Architecture: source
Version: 1.16.5-1
Distribution: unstable
Urgency: high
Maintainer: Utopia Maintenance Team
<[email protected]>
Changed-By: Simon McVittie <[email protected]>
Closes: 1132960 1132968
Changes:
flatpak (1.16.5-1) unstable; urgency=high
.
* New upstream release fixing some of the regressions in 1.16.4
(Closes: #1132960, #1132968)
* Drop patches that were applied upstream
* d/p/utils-Add-flatpak_set_cloexec.patch,
d/p/run-context-Mark-fd-arguments-as-close-on-exec.patch:
Add proposed patches to fix another regression in 1.16.4 for
Chromium-based browsers
(Closes: #1132968)
* d/p/run-Cope-with-an-empty-runtime.patch,
d/p/dir-In-apply_extra_data-don-t-assume-there-is-always-a-ru.patch:
Add proposed patches to fix regression in 1.16.4 when installing
apps/runtimes/extensions that use a statically-linked extra-data helper
* d/p/utils-Move-flatpak_get_path_for_fd-to-here.patch,
d/p/portal-Avoid-crash-if-sandbox-expose-ro-fd-is-out-of-rang.patch,
d/p/portal-Log-and-ignore-unusable-sandbox-expose-fds-instead.patch,
d/p/portal-Reinstate-flatpak_get_path_for_fd-checks.patch:
Add proposed patches to fix regression in 1.16.4 for Epiphany and
possibly other WebKitGTK-based apps
* d/p/libtest-Allow-adding-a-new-ref-to-an-existing-temporary-o.patch:
Add proposed patch to fix autopkgtest failure
Checksums-Sha1:
818666948ab815981dbe0981dd0fc564820e688a 3827 flatpak_1.16.5-1.dsc
bd52ea949ff70c93da5ac229fe8ba08e2db472ba 1240128 flatpak_1.16.5.orig.tar.xz
af2d34a4316d0f025f60a1236c4498b186912116 48424 flatpak_1.16.5-1.debian.tar.xz
8d35294fafa64e3e2c43a812bb390b59fa6fa36d 14348
flatpak_1.16.5-1_source.buildinfo
Checksums-Sha256:
7023e18e43fca8e409800741989d6565f6afd5d472b25d8e90bb2f88042443cd 3827
flatpak_1.16.5-1.dsc
a320e9581649766c264a97304b1563c3d04d87dcc1115427860b658083cbc156 1240128
flatpak_1.16.5.orig.tar.xz
e02c62a56fe6f534102af9ec755e732304b1493d8b35ed86c70b120c310b77f3 48424
flatpak_1.16.5-1.debian.tar.xz
b420ab97d40f0763e806d797a73b0496ef4b7bbdf5dd98c7ee11d6626b762426 14348
flatpak_1.16.5-1_source.buildinfo
Files:
14d775763a3525037a159adc8005b496 3827 admin optional flatpak_1.16.5-1.dsc
ec62cb3762af15187328184f40bfd816 1240128 admin optional
flatpak_1.16.5.orig.tar.xz
afe805dfa4002cbb86e8a656c429dcbe 48424 admin optional
flatpak_1.16.5-1.debian.tar.xz
1bca7e1221ced915d957babdf49dc305 14348 admin optional
flatpak_1.16.5-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=HvD3
-----END PGP SIGNATURE-----
pgpFdYGHagfa5.pgp
Description: PGP signature
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
