[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#885545: marked as done (hannah-foo2zjs: Don't depend on gksu)



Your message dated Sun, 31 Dec 2017 10:33:55 +0000
with message-id <E1eVawF-0008CK-O2@fasolo.debian.org>
and subject line Bug#885545: fixed in hannah-foo2zjs 1:3
has caused the Debian Bug report #885545,
regarding hannah-foo2zjs: Don't depend on gksu
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
885545: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=885545
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Source: hannah-foo2zjs
Severity: serious
Tags: sid buster
User: pkg-gnome-maintainers@lists.alioth.debian.org
Usertags: oldlibs gksu

gksu has been deprecated for years. The intent of gksu is to allow
running apps with elevated privileges but the way to do that is for
the app developer to use PolicyKit to request elevated privileges for
the specific actions that need done instead of for the whole app to
run as root.

For the next major stable release of Debian (codenamed Buster), the
Debian GNOME team plans to default to GNOME on Wayland where gksu does
not even work.

Therefore, the Debian GNOME team intends to either remove gksu or
replace it with a non-functional warning message. gksu is unmaintained
(last upload 2014) and is a security vulnerability.

On behalf of the Debian GNOME team,
Jeremy Bicha

--- End Message ---
--- Begin Message ---
Source: hannah-foo2zjs
Source-Version: 1:3

We believe that the bug you reported is fixed in the latest version of
hannah-foo2zjs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 885545@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Pino Toscano <pino@debian.org> (supplier of updated hannah-foo2zjs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 31 Dec 2017 11:03:05 +0100
Source: hannah-foo2zjs
Binary: hannah-foo2zjs
Architecture: source
Version: 1:3
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Pino Toscano <pino@debian.org>
Description:
 hannah-foo2zjs - Graphical firmware downloader for the foo2zjs package
Closes: 772447 874903 885545
Changes:
 hannah-foo2zjs (1:3) unstable; urgency=medium
 .
   * QA upload.
   * Switch source format to "3.0 (native)".
   * Do not ship the generated hannah binary, and the Makefile, and make sure
     to remove them on clean.
   * Drop the menu file, since hannah-foo2zjs already provides a .desktop file.
   * Use an install file to install all the files, using dh-exec to rename the
     files:
     - add a new executable hannah-foo2zjs.install file
     - add the dh-exec build dependency
   * Rewrite rule to use the dh sequencer.
   * Bump the debhelper compatibility to 10:
     - bump compat to 10
     - bump the debhelper build dependency to 10~
   * Switch versioned conflict to versioned break.
   * Cleanup hannah.pro.
   * Build the application with Qt 5: (Closes: #874903)
     - set the QT modules in the .pro file
     - switch the libqt4-dev build dependency to qtbase5-dev
     - set QT_SELECT=5 in rules, to make sure to build even when Qt 4 is
       installed too
   * Various improvements to the application itself:
     - reindent code
     - forward-declare classes, including only what needed, and where needed
     - do not hardcode the font, use the default one
     - use better QMessageBox APIs
     - create & lay out widgets in the right order
     - add a checkbox -> firmware mapping, so there is not a separate list for
       the latter
     - turn the "Mark all" from a checkbox into a button, and add also a new
       "Unmark all" button
     - switch from QStatusBar to QLabel for the status messages
     - disable the download button while downloading
     - set the "printer" icon for the application
     - harden the build with extra defines, and fix the code accordingly
       (slot -> Q_SLOTS, QStringLiteral, etc)
     - group checkboxes & mark/unmark buttons in a group box, with the
       checkboxes laid in two columns
     - improve the text in the about dialog
     - add accelerators for buttons
   * Fix path of getweb to /usr/sbin/getweb. (Closes: #772447)
   * Use pkexec to run getweb, instead of su-to-root for the whole application:
     (LP: #1713311)
     - depend on policykit-1
     - drop the gksu|kdebase-bin|kde-runtime|kdebase-runtime|ktsuss|sux
       dependency (Closes: #885545)
     - directly exec hannah-foo2zjs in the desktop file
   * Make hannah.desktop file valid:
     - set the value of the 'Terminal' key to false (as it is a boolean)
     - add the Qt category, and remove the Settings one
   * Link in as-needed mode.
   * Bump Standards-Version to 4.1.3, no changes required.
   * Add myself to copyright, for both code and packaging.
Checksums-Sha1:
 7bbb82f5a337b9cfacd557b6a5683768d3ac2864 1450 hannah-foo2zjs_3.dsc
 688ea7e460e03c465ae3489e1e195e4538cb1648 5472 hannah-foo2zjs_3.tar.xz
 f94fb8db3baadae9b28acf701bafb26f31d8c7ce 9788 hannah-foo2zjs_3_source.buildinfo
Checksums-Sha256:
 7784eec93b6ca81deb4ee2c597494c97077059f9ecc41c2b2f57ac216e609538 1450 hannah-foo2zjs_3.dsc
 fa38578aba3c2d043bfc608dbb2359ff52033b497bf056b0898104cb475ee19a 5472 hannah-foo2zjs_3.tar.xz
 30b94c06be21beb945b4427dc5741f34c7ba13a94ccb925c664c34bfbee303c8 9788 hannah-foo2zjs_3_source.buildinfo
Files:
 a091e33dc291fc5b91e4fdcf80fd48da 1450 contrib/text optional hannah-foo2zjs_3.dsc
 222e4a6acab5484bea802fe2f4754af0 5472 contrib/text optional hannah-foo2zjs_3.tar.xz
 270d0667fdf4cf001e0f4384ce7e9c3a 9788 contrib/text optional hannah-foo2zjs_3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=3iBj
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: