Package: dbus-user-session
Version: 1.10.0-1
Severity: serious
Justification: maintainer says so

mbiebl and buxy pointed out that installing dbus-user-session does not
force dbus-x11 to be upgraded in lockstep.

This is bad, because older dbus-x11 versions ship a 75dbus_dbus-launch
script that starts dbus-launch even if DBUS_SESSION_BUS_ADDRESS is already
set. That would cause two buses to be launched, and a nasty split-brain
situation.

It is not possible to make `dbus-launch --exit-with-session` not launch
if DBUS_SESSION_BUS_ADDRESS is set, because third party software relies
on being able to (ab)use dbus-launch to get a new bus for regression
tests and similar, because dbus-run-session(1) was only recently invented.

    S

Reply via email to