xdg-dbus-proxy (0.1.6-1+deb13u2) trixie-security; urgency=high

  * d/p/GHSA-r7hp-698j-2h6c/*.patch:
    Fix a vulnerability in access control for receiving broadcasts.
    In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could
    receive any broadcast D-Bus message on the session bus or the AT-SPI
    bus, leading to unintended information disclosure.
  * d/p/tests/*.patch:
    Add automated test coverage for message filtering

 -- Simon McVittie <smcv@debian.org>  Tue, 11 Aug 2026 13:43:30 +0100

xdg-dbus-proxy (0.1.6-1+deb13u1) trixie-security; urgency=high

  * d/gbp.conf: Configure for trixie
  * d/p/Improve-detection-of-eavesdrop-true.patch:
    Fix detection of eavesdrop=true match rules, resolving a vulnerability
    in which a malicious or compromised Flatpak app could monitor D-Bus
    traffic that it was not intended to be able to access.
    (CVE-2026-34080) (Closes: #1132939)

 -- Simon McVittie <smcv@debian.org>  Fri, 10 Apr 2026 23:31:23 +0100

xdg-dbus-proxy (0.1.6-1) unstable; urgency=medium

  * Team upload
  * New upstream release
  * Bump Standards Version to 4.7.0

 -- Jeremy Bícha <jbicha@ubuntu.com>  Thu, 22 Aug 2024 11:36:07 -0400

xdg-dbus-proxy (0.1.5-1) unstable; urgency=medium

  * Team upload
  * New upstream release
  * Drop remaining patch: applied in new release
  * Update standards version to 4.6.2, no changes needed

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 16 Aug 2023 09:40:55 -0400

xdg-dbus-proxy (0.1.4-3) unstable; urgency=medium

  * Depend on dbus-daemon for tests instead of dbus.
    The tests start their own mock session bus instance, and do not require
    the implementation of the well-known system bus that is provided by the
    dbus package.

 -- Simon McVittie <smcv@debian.org>  Thu, 08 Dec 2022 10:46:11 +0000

xdg-dbus-proxy (0.1.4-2) unstable; urgency=medium

  * d/watch: Update for Github website changes
  * Update standards version to 4.6.1 (no changes needed)

 -- Simon McVittie <smcv@debian.org>  Sat, 12 Nov 2022 17:29:46 +0000

xdg-dbus-proxy (0.1.4-1) unstable; urgency=medium

  * New upstream release
  * Build using Meson
  * d/p/meson-Optionally-install-tests-for-as-installed-testing.patch:
    Add proposed patch to restore parity of installed-tests coverage
    with Autotools

 -- Simon McVittie <smcv@debian.org>  Wed, 11 May 2022 10:51:07 +0100

xdg-dbus-proxy (0.1.3-1) unstable; urgency=medium

  * New upstream release
  * Standards-Version: 4.6.0 (no changes required)
  * Use debhelper compat level 13, drop dh_missing override

 -- Simon McVittie <smcv@debian.org>  Fri, 11 Feb 2022 12:00:51 +0000

xdg-dbus-proxy (0.1.2-2) unstable; urgency=medium

  * Set upstream metadata field: Repository.
  * Remove obsolete field Name from debian/upstream/metadata (already
    present in machine-readable debian/copyright)
  * d/rules: Don't explicitly use --as-needed linker option.
    It's the default with bullseye toolchains.
  * d/gbp.conf: Rename development branch to debian/latest
  * Standards-Version: 4.5.1 (no changes required)

 -- Simon McVittie <smcv@debian.org>  Sat, 19 Dec 2020 12:44:10 +0000

xdg-dbus-proxy (0.1.2-1) unstable; urgency=medium

  * New upstream release
    - Drop all patches, applied upstream

 -- Simon McVittie <smcv@debian.org>  Thu, 19 Sep 2019 08:11:28 +0100

xdg-dbus-proxy (0.1.1-2) unstable; urgency=medium

  * d/p/Fix-segfault-when-flatpak_proxy_start-fails.patch:
    Add patch from upstream to fix a crash when startup fails
  * d/p/build-Forbid-AX_-prefixed-patterns-more-selectively.patch,
    d/p/build-Adapt-to-AX_CODE_COVERAGE-API-change.patch,
    d/p/build-Use-CODE_COVERAGE_CPPFLAGS.patch:
    Add patches proposed upstream to fix FTBFS with autoconf-archive
    20190106
  * Remove redundant --libexecdir=/usr/libexec.
    This is the default at debhelper compat level 12.
  * Standards-Version: 4.4.0
  * d/copyright: Update
  * d/salsa-ci.yml: Request standard CI on salsa.debian.org

 -- Simon McVittie <smcv@debian.org>  Thu, 05 Sep 2019 08:54:23 +0100

xdg-dbus-proxy (0.1.1-1) unstable; urgency=medium

  * d/upstream/metadata: Add DEP-12 metadata
  * New upstream release
    - Drop all patches, applied upstream
  * Remove workaround that made sure build-aux/tap-test was executable.
    Now that it's part of the upstream source and not added by a patch,
    it already has suitable permissions.

 -- Simon McVittie <smcv@debian.org>  Sun, 20 Jan 2019 11:13:12 +0000

xdg-dbus-proxy (0.1.0-2) unstable; urgency=medium

  * Improve patch metadata
  * Add patches to facilitate backporting to stretch
  * Standards-Version: 4.3.0
  * Use debhelper-compat 12
  * Ensure that build-aux/tap-test is executable before running tests

 -- Simon McVittie <smcv@debian.org>  Mon, 14 Jan 2019 20:05:06 +0000

xdg-dbus-proxy (0.1.0-1) unstable; urgency=medium

  * Initial release under this name (Closes: #915579).
    xdg-dbus-proxy was previously flatpak-dbus-proxy, in the flatpak
    package. It was factored out by the Flatpak upstream developers so
    that it can be used by packages like webkit2gtk 2.23.x.
  * Apply patches from upstream git to add a license, --help, a man page
    and a simple regression test (upstream PRs #2, #3, #5) and to
    fix a compiler warning (upstream PR #4)

 -- Simon McVittie <smcv@debian.org>  Wed, 12 Dec 2018 14:57:14 +0000
