Your message dated Tue, 03 May 2022 06:33:51 +0000
with message-id <e1nlm6z-000ai8...@fasolo.debian.org>
and subject line Bug#931728: fixed in variety 0.8.7-1
has caused the Debian Bug report #931728,
regarding Allow disabling online access features
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
931728: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931728
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: variety
Version: 0.7.1-2
Severity: important
Tags: upstream

Hi,

Thank you for packaging variety. It is a very nice program and does its work 
smoothly.

Sadly, it contains code which attempts to load "options" from a remove server 
without user's consent. See [1] and [2].

[1] 
https://sources.debian.org/src/variety/0.7.1-2/variety/VarietyWindow.py/?hl=81#L609
[2] 
https://sources.debian.org/src/variety/0.7.1-2/variety/VarietyWindow.py/?hl=81#L932

I'll prepare a merge request that removes the start of the background thread 
which does the fetch. Variety works just fine without it.


Thanks for considering,
    Damyan

-- System Information:
Debian Release: 10.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=bg_BG.UTF-8, LC_CTYPE=bg_BG.UTF-8 (charmap=UTF-8), 
LANGUAGE=bg_BG.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages variety depends on:
ii  gir1.2-gdkpixbuf-2.0             2.38.1+dfsg-1
ii  gir1.2-gexiv2-0.10               0.10.9-1
ii  gir1.2-glib-2.0                  1.58.3-2
ii  gir1.2-gtk-3.0                   3.24.5-1
ii  gir1.2-notify-0.7                0.7.7-4
ii  gir1.2-pango-1.0                 1.42.4-6
ii  imagemagick                      8:6.9.10.23+dfsg-2.1
ii  imagemagick-6.q16 [imagemagick]  8:6.9.10.23+dfsg-2.1
ii  python3                          3.7.3-1
ii  python3-bs4                      4.7.1-1
ii  python3-cairo                    1.16.2-1+b1
ii  python3-configobj                5.0.6-3
ii  python3-dbus                     1.2.8-3
ii  python3-gi                       3.30.4-1
ii  python3-gi-cairo                 3.30.4-1
ii  python3-lxml                     4.3.3-2
ii  python3-pil                      5.4.1-2
ii  python3-pkg-resources            41.0.1-1
ii  python3-requests                 2.21.0-1

Versions of packages variety recommends:
ii  gir1.2-appindicator3-0.1  0.4.92-7
ii  python3-httplib2          0.11.3-2

Versions of packages variety suggests:
pn  feh | nitrogen                      <none>
ii  gnome-shell-extension-appindicator  22-1

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: variety
Source-Version: 0.8.7-1
Done: James Lu <ja...@overdrivenetworks.com>

We believe that the bug you reported is fixed in the latest version of
variety, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 931...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
James Lu <ja...@overdrivenetworks.com> (supplier of updated variety package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 01 May 2022 17:34:12 -0700
Source: variety
Architecture: source
Version: 0.8.7-1
Distribution: unstable
Urgency: medium
Maintainer: James Lu <ja...@overdrivenetworks.com>
Changed-By: James Lu <ja...@overdrivenetworks.com>
Closes: 931728
Changes:
 variety (0.8.7-1) unstable; urgency=medium
 .
   * New upstream release:
     - Allow disabling online access in preferences (Closes: #931728)
   * Packaging changes:
     - Add gbp.conf configuration
     - Drop 0002-Change-default-font-to-Sans-for-compatibility.patch;
       applied upstream
     - Update to Standards-Version 4.6.0, no changes needed
Checksums-Sha1:
 3fda53bb94f09580867605c9e631546f20061b12 1875 variety_0.8.7-1.dsc
 46a798f93d9f14e730569c47b7168ed927813d20 820291 variety_0.8.7.orig.tar.gz
 58d2e4c8edcb24a17b69df67578d14fde5b9c4a6 8532 variety_0.8.7-1.debian.tar.xz
 fb4d4f88b048021546e0396d84450d6f2a6b0880 7615 variety_0.8.7-1_source.buildinfo
Checksums-Sha256:
 5b4cf736dc278f5d49f09b265c8afec321eada2b7f5136369b9583b1aee6245b 1875 
variety_0.8.7-1.dsc
 9df854904eec5a1cea0a3053263e47bad9ad8aa8e2be9e8f9a766bc9feb8b195 820291 
variety_0.8.7.orig.tar.gz
 3cc08ef9819924a05594c75776d351113a6d886aed4ce618bca72bf8433b044e 8532 
variety_0.8.7-1.debian.tar.xz
 38aeb7bf6415b0745d5a3c9d4d87f5558e50c7713af2aa0f648b7176875a18bb 7615 
variety_0.8.7-1_source.buildinfo
Files:
 904f7f8e31f952dfa84a211023bdea70 1875 graphics optional variety_0.8.7-1.dsc
 2488811c46247a31539f899a5663adaa 820291 graphics optional 
variety_0.8.7.orig.tar.gz
 70d0791c5f1617ac4149ab51cf8fb8da 8532 graphics optional 
variety_0.8.7-1.debian.tar.xz
 e6a166a562db3b3dd7649e0ea138357f 7615 graphics optional 
variety_0.8.7-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=9peo
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to