Your message dated Mon, 24 Jun 2019 23:21:01 +0000
with message-id <e1hfygj-0003ni...@fasolo.debian.org>
and subject line Bug#931021: fixed in musescore 2.3.2+dfsg2-7
has caused the Debian Bug report #931021,
regarding musescore: phones home, including to Google Analytics, on first start
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
931021: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931021
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: musescore
Version: 2.3.2+dfsg2-6
Severity: serious
Tags: security
Justification: phones home
Bugreport for myself and for release tracking.
Dear release team, please indicate whether this is buster release-critical,
I will try to fix it later tonight.
On first startup, MuseScore connects to:
connect2.musescore.com CNAME cds.z5r7u8v4.hwcdn.net
cds.z5r7u8v4.hwcdn.net A 205.185.216.10
cds.z5r7u8v4.hwcdn.net A 205.185.216.42
(Highwinds Network Operations Center)
The currently shipped HTML content makes it also connect to:
www.google-analytics.com CNAME www-google-analytics.l.google.com
www-google-analytics.l.google.com A 172.217.16.174
www-google-analytics.l.google.com AAAA 2A00:1450:4001:81B:0:0:0:200E
Also:
mc.yandex.ru A 93.158.134.119
mc.yandex.ru A 77.88.21.119
mc.yandex.ru A 87.250.250.119
mc.yandex.ru A 87.250.251.119
mc.yandex.ru AAAA 2A02:6B8:0:0:0:0:1:119
And:
stats.g.doubleclick.net CNAME stats.l.doubleclick.net
stats.l.doubleclick.net A 74.125.133.155
stats.l.doubleclick.net A 74.125.133.156
stats.l.doubleclick.net A 74.125.133.157
stats.l.doubleclick.net A 74.125.133.154
stats.l.doubleclick.net AAAA 2A00:1450:400C:C0B:0:0:0:9D
I’ll simply remove the offending “web start centre” functionality,
given that MuseScore 3.x will not ship it either anyway (for tech
reasons).
-- System Information:
Debian Release: 10.0
APT prefers unreleased
APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64
Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)
Versions of packages musescore depends on:
ii desktop-file-utils 0.23-4
ii libasound2 1.1.8-1+x32.1
ii libc6 2.28-10
ii libfreetype6 2.9.1-3
ii libgcc1 1:8.3.0-7
ii libportaudio2 19.6.0-1
ii libportmidi0 1:217-6
ii libpulse0 12.2-4
ii libqt5core5a 5.11.3+dfsg1-2
ii libqt5gui5 5.11.3+dfsg1-2
ii libqt5help5 5.11.3-4
ii libqt5network5 5.11.3+dfsg1-2
ii libqt5printsupport5 5.11.3+dfsg1-2
ii libqt5qml5 5.11.3-4
ii libqt5quick5 5.11.3-4
ii libqt5sql5-sqlite 5.11.3+dfsg1-2
ii libqt5svg5 5.11.3-2
ii libqt5webkit5 5.212.0~alpha2-21
ii libqt5widgets5 5.11.3+dfsg1-2
ii libqt5xml5 5.11.3+dfsg1-2
ii libqt5xmlpatterns5 5.11.3-2
ii libsndfile1 1.0.28-6
ii libstdc++6 8.3.0-7
ii libvorbisfile3 1.3.6-2
ii musescore-common 2.3.2+dfsg3-2
ii qml-module-qtquick-controls 5.11.3-2
ii qml-module-qtquick-dialogs 5.11.3-2
ii qml-module-qtquick-layouts 5.11.3-4
ii qml-module-qtquick2 5.11.3-4
ii shared-mime-info 1.10-1
ii xdg-utils 1.1.3-1
ii zlib1g 1:1.2.11.dfsg-1
Versions of packages musescore recommends:
ii libmp3lame0 3.100-2+b1
pn pulseaudio-utils <none>
musescore suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: musescore
Source-Version: 2.3.2+dfsg2-7
We believe that the bug you reported is fixed in the latest version of
musescore, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 931...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thorsten Glaser <t...@mirbsd.de> (supplier of updated musescore package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384
Format: 1.8
Date: Mon, 24 Jun 2019 18:07:46 +0200
Source: musescore
Architecture: source
Version: 2.3.2+dfsg2-7
Distribution: unstable
Urgency: high
Maintainer: Debian Multimedia Maintainers <debian-multime...@lists.debian.org>
Changed-By: Thorsten Glaser <t...@mirbsd.de>
Closes: 931021
Changes:
musescore (2.3.2+dfsg2-7) unstable; urgency=high
.
* Disable webkit functionality (Closes: #931021)
Checksums-Sha1:
82ed9fe919af3d5dd4b451c1afab4b86945e6f1a 2724 musescore_2.3.2+dfsg2-7.dsc
2d3109f35411f200816fd16993b58cffa6f4dd30 52116
musescore_2.3.2+dfsg2-7.debian.tar.xz
Checksums-Sha256:
fe2c453fb5faeb7c7aa4ecdc07cd75686219073b1b83e3abb7a411d8705e3419 2724
musescore_2.3.2+dfsg2-7.dsc
1e6dbba0b9ead2cf4ba04fb97a4158d86e9875a02522a4468f5801d116938738 52116
musescore_2.3.2+dfsg2-7.debian.tar.xz
Files:
21d35820780069124b17f02b02f4c293 2724 sound optional
musescore_2.3.2+dfsg2-7.dsc
f09e11a52053bc701af277689dcb7370 52116 sound optional
musescore_2.3.2+dfsg2-7.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (MirBSD)
Comment: my build server broke so I'll have to test with the buildds, sorry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=MsCr
-----END PGP SIGNATURE-----
--- End Message ---
