[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#777081: marked as done (kopete: Browser plugin should be removed or in a separate package)



Your message dated Sun, 11 Nov 2018 11:19:41 +0000
with message-id <E1gLnmH-000B1b-2H@fasolo.debian.org>
and subject line Bug#777081: fixed in kopete 4:17.08.3-2
has caused the Debian Bug report #777081,
regarding kopete: Browser plugin should be removed or in a separate package
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
777081: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777081
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: kopete
Version: 4:4.14.1-2
Severity: normal

I just noticed that kopete installs a mozilla browser plugin. There
seems to be little information on what this plugin does. In particular,
the kopete package description does not give any hint about this.

Since this greatly increases the attack surface for security issues in
mozilla, the plugin should be moved to a separate package and there
should be some indication what the plugin does.

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages kopete depends on:
ii  kde-runtime             4:4.14.2-2
ii  kdepim-runtime          4:4.14.2-3
ii  libc6                   2.19-14
ii  libexpat1               2.1.0-6+b3
ii  libgadu3                1:1.12.0-5
ii  libgif4                 4.1.6-11
ii  libglib2.0-0            2.42.1-1
ii  libidn11                1.29-1+b2
ii  libjasper1              1.900.1-debian1-2.4
ii  libkabc4                4:4.14.2-2+b1
ii  libkcmutils4            4:4.14.2-5
ii  libkde3support4         4:4.14.2-5
ii  libkdecore5             4:4.14.2-5
ii  libkdeui5               4:4.14.2-5
ii  libkdnssd4              4:4.14.2-5
ii  libkemoticons4          4:4.14.2-5
ii  libkhtml5               4:4.14.2-5
ii  libkio5                 4:4.14.2-5
ii  libkmime4               4:4.14.2-2+b1
ii  libknewstuff2-4         4:4.14.2-5
ii  libknotifyconfig4       4:4.14.2-5
ii  libkopete4              4:4.14.1-2
ii  libkparts4              4:4.14.2-5
ii  libkpimidentities4      4:4.14.2-2+b1
ii  libmeanwhile1           1.0.2-5
ii  libmediastreamer-base3  3.6.1-2.4+b1
ii  libmsn0.3               4.2-2
ii  libortp9                3.6.1-2.4+b1
ii  libotr5                 4.1.0-2
ii  libphonon4              4:4.8.0-4
ii  libqca2                 2.0.3-6
ii  libqimageblitz4         1:0.0.6-4
ii  libqt4-dbus             4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqt4-network          4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqt4-qt3support       4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqt4-sql              4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqt4-xml              4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqtcore4              4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqtgui4               4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libsolid4               4:4.14.2-5
ii  libsrtp0                1.4.5~20130609~dfsg-1.1
ii  libssl1.0.0             1.0.1k-1
ii  libstdc++6              4.9.2-10
ii  libv4l-0                1.6.0-2
ii  libx11-6                2:1.6.2-3
ii  libxml2                 2.9.2+dfsg1-3
ii  libxslt1.1              1.1.28-2+b2
ii  perl                    5.20.1-5
ii  phonon                  4:4.8.0-4
ii  zlib1g                  1:1.2.8.dfsg-2+b1

Versions of packages kopete recommends:
ii  libqca2-plugin-ossl  2.0.0~beta3-2
ii  libqt4-sql-sqlite    4:4.8.6+git64-g5dc8b2b+dfsg-2+b1

Versions of packages kopete suggests:
ii  imagemagick           8:6.8.9.9-5
pn  kdeartwork-emoticons  <none>
ii  khelpcenter4          4:4.14.2-2
ii  texlive-latex-base    2014.20141024-2

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: kopete
Source-Version: 4:17.08.3-2

We believe that the bug you reported is fixed in the latest version of
kopete, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 777081@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Pino Toscano <pino@debian.org> (supplier of updated kopete package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Nov 2018 11:59:43 +0100
Source: kopete
Binary: libkopete4 kopete libkopete-dev
Architecture: source
Version: 4:17.08.3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian/Kubuntu Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Pino Toscano <pino@debian.org>
Description:
 kopete     - instant messaging and chat application
 libkopete-dev - development files for the Kopete instant messaging and chat appli
 libkopete4 - main Kopete library
Closes: 777081 858938 890606 898084
Changes:
 kopete (4:17.08.3-2) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Pino Toscano ]
   * Switch Vcs-* fields to salsa.debian.org.
   * Bump the debhelper compatibility to 11:
     - bump the debhelper build dependency to 11~
     - bump compat to 11
   * Use https for Format in copyright.
   * Disable the build of the skypebuttons NPAPI browser plugin, which is no
     more useful now: (Closes: #777081)
     - pass -DBUILD_skypebuttons=OFF to cmake
     - update install files
   * Switch kopete to srtp2: (Closes: #898084)
     - backport ArchLinux patch for it; patch kopete-srtp2.patch
     - switch libsrtp0-dev build dependency with libsrtp2-dev
   * Bump Standards-Version to 4.2.1, no changes required.
   * Update lintian overrides.
 .
   [ Sandro Knauß ]
   * Fix "Please migrate to openssl1.1 in buster" (Closes: #858938)
     - Added patch from Fedora kopete-17.08.3-openssl-1.1.patch.
     - Replaces Build-Dependency from libssl1.0-dev to libssl-dev.
 .
   [ Felix Lechner ]
   * Port jabber protocol to recent Linphone libraries (Closes: #890606)
Checksums-Sha1:
 5c99ffb47048bc66c57739ede1a096e3a9bd70d9 2870 kopete_17.08.3-2.dsc
 d0a2d715a8de3083bb8d54597b2b55ed540adf92 63816 kopete_17.08.3-2.debian.tar.xz
 d673befae93585490fd9bb80312a9c11bf2eec71 18749 kopete_17.08.3-2_source.buildinfo
Checksums-Sha256:
 92fb4700a7dd13b67e93c18b67997e537c475d9d3284a7e9a6d5405cf05a4246 2870 kopete_17.08.3-2.dsc
 10ec7a98af530e063e96be4751927ef577e1276ad7f09298aa860d11c8ee0b48 63816 kopete_17.08.3-2.debian.tar.xz
 c89d52d96b98184c541e2af6a772fc78b660d02b9977f4bfc9ff6798fcdb8328 18749 kopete_17.08.3-2_source.buildinfo
Files:
 c27dfa539aebbcec7858eebd2160dc8f 2870 kde optional kopete_17.08.3-2.dsc
 0a4311125ee03c8b596a7a2602610bc1 63816 kde optional kopete_17.08.3-2.debian.tar.xz
 21ebcab2aec84da25d48c3f3b482b794 18749 kde optional kopete_17.08.3-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEXyqfuC+mweEHcAcHLRkciEOxP00FAlvoC9EACgkQLRkciEOx
P038vA/9FCZsxl4OdcTUpHJnmfxuhPhsoMCNHlxh/vVx7KoB5cwYNlHHiVcPpP8W
Iq0oC8eX/wvpF555AeQOUlXx2IcPoRU7THKmqWCELo8E2FX9lQ1klpvrWFZLwDut
i40cnur/dmQVSm9UJJ0bzPtap4Kuz6O+MhMRK52iiNYlhJYOwDy/QLAlF0VYZo4O
rClXzAZ4StgsCoXH0ED65WpDDuPfUdmjAuzVRMCVZyjUq+omhXjKAS5I+3WQJ0p9
q1asTXFUgv1RnyHHzHkSFg5UwNZ+CWsWEoxlXuvea61CJpLJ3eMJuUV3j6fFildz
sz1i2QpMgQAP8HyfZy+Bk5/5EkeEZGEV00OpGODksdeicKf1qQFcOW15KvJAkE7m
Gmc9uxB3C6sdCzPOnWcqR7yAv+xd3nqA3y1hrWj1IA6jk3SQEHmtR4SnGURP5WO4
NtjobuDUReDI8Yj3GUVwTwMwBwyhUDSWhs5ILM1b3kP5hn4lJY0OI7iOBpBvFxT3
eYbsN/3He2+MWP+Z8L0uV2spj9ADoexBGNb2Xx59XQ+wz/8yh33ObM+JhzCsWV2R
ibt1n8xzYyEbZfvfVziAAXp2u4VMWGOhti+iaf5xmnLPkg1eS7xPrJ5UT8VKJEmu
fIiJjQhFQ1H9lf02GzpcENYFkp3yoo+eKY1YmgfEh1+sJo/QUwE=
=iLnl
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: