Bug 278474

Summary: deskutils/xdg-desktop-portal: Update 1.18.3 -> 1.18.4
Product: Ports & Packages Reporter: Älven <alster>
Component: Individual Port(s)Assignee: Gleb Popov <arrowd>
Status: Closed FIXED    
Severity: Affects Only Me CC: alster, arrowd
Priority: --- Flags: arrowd: maintainer-feedback+
Version: Latest   
Hardware: Any   
OS: Any   
URL: https://github.com/flatpak/xdg-desktop-portal/releases/tag/1.18.4
Attachments:
Description Flags
[PATCH] deskutils/xdg-desktop-portal: Update 1.18.3 -> 1.18.4 alster: maintainer-approval? (arrowd)

Description Älven 2024-04-20 03:25:15 UTC
This is a new minor release of xdg-desktop-portal 1.18 series. Users and distributions are strongly encouraged to update to this version. These are the changes included in this release:

    Don't allow commandline arrays when the first commandline item starts with whitespace or hyphen. (CVE-2024-32462)
    Do not store device access permission if it returned an error.
    Fix crash with config files without a default backend set.
Comment 1 Älven 2024-04-20 03:27:41 UTC
Created attachment 250097 [details]
[PATCH] deskutils/xdg-desktop-portal: Update 1.18.3 -> 1.18.4
Comment 2 commit-hook freebsd_committer freebsd_triage 2024-04-20 12:01:49 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=5416071603661e6d3827efa9a476617171e76d15

commit 5416071603661e6d3827efa9a476617171e76d15
Author:     Andrey Korobkov <alster@vinterdalen.se>
AuthorDate: 2024-04-20 10:52:02 +0000
Commit:     Gleb Popov <arrowd@FreeBSD.org>
CommitDate: 2024-04-20 12:01:31 +0000

    deskutils/xdg-desktop-portal: Update to 1.18.4

    PR:             278474

 deskutils/xdg-desktop-portal/Makefile  | 9 ++++-----
 deskutils/xdg-desktop-portal/distinfo  | 6 +++---
 deskutils/xdg-desktop-portal/pkg-descr | 4 ++--
 3 files changed, 9 insertions(+), 10 deletions(-)