[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#777081: kopete: Browser plugin should be removed or in a separate package



Package: kopete
Version: 4:4.14.1-2
Severity: normal

I just noticed that kopete installs a mozilla browser plugin. There
seems to be little information on what this plugin does. In particular,
the kopete package description does not give any hint about this.

Since this greatly increases the attack surface for security issues in
mozilla, the plugin should be moved to a separate package and there
should be some indication what the plugin does.

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages kopete depends on:
ii  kde-runtime             4:4.14.2-2
ii  kdepim-runtime          4:4.14.2-3
ii  libc6                   2.19-14
ii  libexpat1               2.1.0-6+b3
ii  libgadu3                1:1.12.0-5
ii  libgif4                 4.1.6-11
ii  libglib2.0-0            2.42.1-1
ii  libidn11                1.29-1+b2
ii  libjasper1              1.900.1-debian1-2.4
ii  libkabc4                4:4.14.2-2+b1
ii  libkcmutils4            4:4.14.2-5
ii  libkde3support4         4:4.14.2-5
ii  libkdecore5             4:4.14.2-5
ii  libkdeui5               4:4.14.2-5
ii  libkdnssd4              4:4.14.2-5
ii  libkemoticons4          4:4.14.2-5
ii  libkhtml5               4:4.14.2-5
ii  libkio5                 4:4.14.2-5
ii  libkmime4               4:4.14.2-2+b1
ii  libknewstuff2-4         4:4.14.2-5
ii  libknotifyconfig4       4:4.14.2-5
ii  libkopete4              4:4.14.1-2
ii  libkparts4              4:4.14.2-5
ii  libkpimidentities4      4:4.14.2-2+b1
ii  libmeanwhile1           1.0.2-5
ii  libmediastreamer-base3  3.6.1-2.4+b1
ii  libmsn0.3               4.2-2
ii  libortp9                3.6.1-2.4+b1
ii  libotr5                 4.1.0-2
ii  libphonon4              4:4.8.0-4
ii  libqca2                 2.0.3-6
ii  libqimageblitz4         1:0.0.6-4
ii  libqt4-dbus             4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqt4-network          4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqt4-qt3support       4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqt4-sql              4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqt4-xml              4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqtcore4              4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqtgui4               4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libsolid4               4:4.14.2-5
ii  libsrtp0                1.4.5~20130609~dfsg-1.1
ii  libssl1.0.0             1.0.1k-1
ii  libstdc++6              4.9.2-10
ii  libv4l-0                1.6.0-2
ii  libx11-6                2:1.6.2-3
ii  libxml2                 2.9.2+dfsg1-3
ii  libxslt1.1              1.1.28-2+b2
ii  perl                    5.20.1-5
ii  phonon                  4:4.8.0-4
ii  zlib1g                  1:1.2.8.dfsg-2+b1

Versions of packages kopete recommends:
ii  libqca2-plugin-ossl  2.0.0~beta3-2
ii  libqt4-sql-sqlite    4:4.8.6+git64-g5dc8b2b+dfsg-2+b1

Versions of packages kopete suggests:
ii  imagemagick           8:6.8.9.9-5
pn  kdeartwork-emoticons  <none>
ii  khelpcenter4          4:4.14.2-2
ii  texlive-latex-base    2014.20141024-2

-- no debconf information


Reply to: