This is a new minor release of xdg-desktop-portal 1.18 series. Users and distributions are strongly encouraged to update to this version. These are the changes included in this release: Don't allow commandline arrays when the first commandline item starts with whitespace or hyphen. (CVE-2024-32462) Do not store device access permission if it returned an error. Fix crash with config files without a default backend set.
Created attachment 250097 [details] [PATCH] deskutils/xdg-desktop-portal: Update 1.18.3 -> 1.18.4
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=5416071603661e6d3827efa9a476617171e76d15 commit 5416071603661e6d3827efa9a476617171e76d15 Author: Andrey Korobkov <alster@vinterdalen.se> AuthorDate: 2024-04-20 10:52:02 +0000 Commit: Gleb Popov <arrowd@FreeBSD.org> CommitDate: 2024-04-20 12:01:31 +0000 deskutils/xdg-desktop-portal: Update to 1.18.4 PR: 278474 deskutils/xdg-desktop-portal/Makefile | 9 ++++----- deskutils/xdg-desktop-portal/distinfo | 6 +++--- deskutils/xdg-desktop-portal/pkg-descr | 4 ++-- 3 files changed, 9 insertions(+), 10 deletions(-)