Your message dated Sat, 17 Jul 2010 12:47:12 +0000
with message-id <e1oa6nq-0002cr...@franck.debian.org>
and subject line Bug#589288: fixed in kupfer 0+v201-2
has caused the Debian Bug report #589288,
regarding kupfer: Missing dependency on python-keyring-gnome
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
589288: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=589288
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: kupfer
Version: 0+v201-0ubuntu0~kupferhope
Severity: grave
Tags: security
Justification: user security hole
Kupfer stores passwords in base64 encoding unless python-keyring-gnome is
installed. This is despite the use of python-keyring, since the default AES
encrypted backend of python-keyring is disabled on purpose in Kupfer (because
it prompts for a password on first run) [1].
If python-keyring-gnome is installed, python-keyring uses GNOME Keyring
automatically. Kupfer should depend on (or recommend) python-keyring-gnome (or
python-keyring-kwallet).
[1] https://bugs.launchpad.net/kupfer/+bug/593319/comments/7
-- System Information:
Debian Release: squeeze/sid
APT prefers lucid-updates
APT policy: (500, 'lucid-updates'), (500, 'lucid-security'), (500, 'lucid')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-23-generic (SMP w/2 CPU cores)
Locale: LANG=ro_RO.utf8, LC_CTYPE=ro_RO.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages kupfer depends on:
ii dbus 1.2.16-2ubuntu4 simple interprocess messaging syst
ii python-dbus 0.83.0-1ubuntu3 simple interprocess messaging syst
ii python-gobject 2.21.1-0ubuntu3 Python bindings for the GObject li
ii python-gtk2 2.17.0-0ubuntu2 Python bindings for the GTK+ widge
ii python-keybind 0.1.1-0ubuntu0~kupferhope register global key bindings for P
ii python-keyring 0.2-3 store and access your passwords sa
ii python-support 1.0.4ubuntu1 automated rebuilding support for P
ii python-xdg 0.18-1ubuntu2 Python library to access freedeskt
ii python2.6 2.6.5-1ubuntu6 An interactive high-level object-o
Versions of packages kupfer recommends:
ii python-gnome2 2.28.0-1ubuntu1 Python bindings for the GNOME desk
ii python-wnck 2.30.0-0ubuntu1 Python bindings for the WNCK libra
Versions of packages kupfer suggests:
pn python-cjson <none> (no description available)
pn python-nautilus <none> (no description available)
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: kupfer
Source-Version: 0+v201-2
We believe that the bug you reported is fixed in the latest version of
kupfer, which is due to be installed in the Debian FTP archive:
kupfer_0+v201-2.debian.tar.gz
to main/k/kupfer/kupfer_0+v201-2.debian.tar.gz
kupfer_0+v201-2.dsc
to main/k/kupfer/kupfer_0+v201-2.dsc
kupfer_0+v201-2_all.deb
to main/k/kupfer/kupfer_0+v201-2_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 589...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Luca Falavigna <dktrkr...@debian.org> (supplier of updated kupfer package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 17 Jul 2010 14:25:38 +0200
Source: kupfer
Binary: kupfer
Architecture: source all
Version: 0+v201-2
Distribution: unstable
Urgency: low
Maintainer: Luca Falavigna <dktrkr...@debian.org>
Changed-By: Luca Falavigna <dktrkr...@debian.org>
Description:
kupfer - fast and lightweight desktop summoner/launcher
Closes: 589288
Changes:
kupfer (0+v201-2) unstable; urgency=low
.
* debian/control:
- Add python-keyring-gnome to Recommends. Plugins which do require
credentials are just a minority, so it's not strictly necessary as
a direct dependency (Closes: #589288).
Checksums-Sha1:
0f9d4ed88b076109314640ac6240ce79560d9858 1360 kupfer_0+v201-2.dsc
4e1f2649476f45dcacbc045caa32c0729972ec25 5571 kupfer_0+v201-2.debian.tar.gz
5f22cf4a9aa85cbfbe394516e57afe2fde6b8343 428950 kupfer_0+v201-2_all.deb
Checksums-Sha256:
84efa346b32cda79c12921e31ff81052a0fe34095b38fed621595c5618837967 1360
kupfer_0+v201-2.dsc
5cfc36496e5933733e9547d3c0036fec459af14514f0fc5a5e562705f2d25074 5571
kupfer_0+v201-2.debian.tar.gz
b34767e551b2d38606295398d0c0474d2ad12e4297710317d4c68aeb063af593 428950
kupfer_0+v201-2_all.deb
Files:
caed9a514a4f083546e96f76072bfb1e 1360 utils optional kupfer_0+v201-2.dsc
3f61e3b2ba43574cac485fbc8921ea38 5571 utils optional
kupfer_0+v201-2.debian.tar.gz
fd27b45392ec370074443dce923fb112 428950 utils optional kupfer_0+v201-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkxBo4MACgkQnXjXEYa8KlAgEwCePpQGl3pjMHx6wS6DogweWJCf
PTwAoKQmdCDWGbHnfenqi3LUIORfNrss
=qGYA
-----END PGP SIGNATURE-----
--- End Message ---
