xdg-desktop-portal (1.22.1+ds-1) [PTS] [DDPO]

COMMITS: VCS has seen 1 commit since the debian/1.22.1+ds-1 tag

Git: https://salsa.debian.org/debian/xdg-desktop-portal.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/latest
Path: debian/changelog
Repo size: 1757184
Browser: https://salsa.debian.org/debian/xdg-desktop-portal
Last scan: 2026-09-11 15:21:10+00
Error: https://salsa.debian.org/api/v4/projects/debian%2Fxdg-desktop-portal API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
Next scan: 2026-09-18 06:03:00+00

Debian changelog in Git:

xdg-desktop-portal (1.22.1+ds-1) unstable; urgency=medium

  * New upstream security fix release
    - Prevent a malicious or compromised sandboxed app from redirecting
      drag-and-drop and copy/paste data to itself (GHSA-c5cf-79w8-pvfh)
    - Prevent a malicious or compromised sandboxed app from gaining
      arbitrary write access to nonexistent files outside the sandbox
      (GHSA-cm83-2936-gxjm)
    - Validate all App IDs in the Document Portal to prevent maliciouss
      applications from providing a crafted App ID which causes the
      parsing of arbitrary files on the host as GLib.KeyFile
      (#2023 upstream)
    - Disable PipeWire's realtime module to prevent deadlocks
      (#2012 upstream)

 -- Simon McVittie <smcv@debian.org>  Thu, 18 Jun 2026 11:22:44 +0100

This branch is 1 commit ahead of tag debian/1.22.1+ds-1

Git log:

commit f74d3a5122216a54c2b3c735b63dae55ca4fff40
Author: Simon McVittie <smcv@debian.org>
Date:   Thu Jun 18 14:42:45 2026 +0100

    Mark patch as forwarded