Your message dated Wed, 21 Aug 2019 22:17:09 +0000
with message-id <e1i0yuj-000fp7...@fasolo.debian.org>
and subject line Bug#931021: fixed in musescore 2.3.2+dfsg2-7~deb10u1
has caused the Debian Bug report #931021,
regarding musescore: phones home, including to Google Analytics, on first start
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
931021: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931021
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: musescore
Version: 2.3.2+dfsg2-6
Severity: serious
Tags: security
Justification: phones home
Bugreport for myself and for release tracking.
Dear release team, please indicate whether this is buster release-critical,
I will try to fix it later tonight.
On first startup, MuseScore connects to:
connect2.musescore.com CNAME cds.z5r7u8v4.hwcdn.net
cds.z5r7u8v4.hwcdn.net A 205.185.216.10
cds.z5r7u8v4.hwcdn.net A 205.185.216.42
(Highwinds Network Operations Center)
The currently shipped HTML content makes it also connect to:
www.google-analytics.com CNAME www-google-analytics.l.google.com
www-google-analytics.l.google.com A 172.217.16.174
www-google-analytics.l.google.com AAAA 2A00:1450:4001:81B:0:0:0:200E
Also:
mc.yandex.ru A 93.158.134.119
mc.yandex.ru A 77.88.21.119
mc.yandex.ru A 87.250.250.119
mc.yandex.ru A 87.250.251.119
mc.yandex.ru AAAA 2A02:6B8:0:0:0:0:1:119
And:
stats.g.doubleclick.net CNAME stats.l.doubleclick.net
stats.l.doubleclick.net A 74.125.133.155
stats.l.doubleclick.net A 74.125.133.156
stats.l.doubleclick.net A 74.125.133.157
stats.l.doubleclick.net A 74.125.133.154
stats.l.doubleclick.net AAAA 2A00:1450:400C:C0B:0:0:0:9D
I’ll simply remove the offending “web start centre” functionality,
given that MuseScore 3.x will not ship it either anyway (for tech
reasons).
-- System Information:
Debian Release: 10.0
APT prefers unreleased
APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64
Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)
Versions of packages musescore depends on:
ii desktop-file-utils 0.23-4
ii libasound2 1.1.8-1+x32.1
ii libc6 2.28-10
ii libfreetype6 2.9.1-3
ii libgcc1 1:8.3.0-7
ii libportaudio2 19.6.0-1
ii libportmidi0 1:217-6
ii libpulse0 12.2-4
ii libqt5core5a 5.11.3+dfsg1-2
ii libqt5gui5 5.11.3+dfsg1-2
ii libqt5help5 5.11.3-4
ii libqt5network5 5.11.3+dfsg1-2
ii libqt5printsupport5 5.11.3+dfsg1-2
ii libqt5qml5 5.11.3-4
ii libqt5quick5 5.11.3-4
ii libqt5sql5-sqlite 5.11.3+dfsg1-2
ii libqt5svg5 5.11.3-2
ii libqt5webkit5 5.212.0~alpha2-21
ii libqt5widgets5 5.11.3+dfsg1-2
ii libqt5xml5 5.11.3+dfsg1-2
ii libqt5xmlpatterns5 5.11.3-2
ii libsndfile1 1.0.28-6
ii libstdc++6 8.3.0-7
ii libvorbisfile3 1.3.6-2
ii musescore-common 2.3.2+dfsg3-2
ii qml-module-qtquick-controls 5.11.3-2
ii qml-module-qtquick-dialogs 5.11.3-2
ii qml-module-qtquick-layouts 5.11.3-4
ii qml-module-qtquick2 5.11.3-4
ii shared-mime-info 1.10-1
ii xdg-utils 1.1.3-1
ii zlib1g 1:1.2.11.dfsg-1
Versions of packages musescore recommends:
ii libmp3lame0 3.100-2+b1
pn pulseaudio-utils <none>
musescore suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: musescore
Source-Version: 2.3.2+dfsg2-7~deb10u1
We believe that the bug you reported is fixed in the latest version of
musescore, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 931...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thorsten Glaser <t...@mirbsd.de> (supplier of updated musescore package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384
Format: 1.8
Date: Wed, 03 Jul 2019 14:22:57 +0200
Source: musescore
Architecture: source
Version: 2.3.2+dfsg2-7~deb10u1
Distribution: buster
Urgency: high
Maintainer: Debian Multimedia Maintainers <debian-multime...@lists.debian.org>
Changed-By: Thorsten Glaser <t...@mirbsd.de>
Closes: 931021
Changes:
musescore (2.3.2+dfsg2-7~deb10u1) buster; urgency=high
.
* Rebuild 2.3.2+dfsg2-7 for buster-updates (cf. #931040)
.
musescore (2.3.2+dfsg2-7) unstable; urgency=high
.
* Disable webkit functionality (Closes: #931021)
Checksums-Sha1:
15485357985d9c0c120592cd695ef6772ee177d4 2756
musescore_2.3.2+dfsg2-7~deb10u1.dsc
58f9acbbdf58e8c67c7f8acfa3c9e4995594358d 52204
musescore_2.3.2+dfsg2-7~deb10u1.debian.tar.xz
Checksums-Sha256:
d4e2d7e50863ed648bbb8d71983914c6ab7e3dc4adb1976dda0188ac01ca757a 2756
musescore_2.3.2+dfsg2-7~deb10u1.dsc
26583da340be5af3684496ba47c4ee66fd803e1412b3ac6ca3cbf570353fbb29 52204
musescore_2.3.2+dfsg2-7~deb10u1.debian.tar.xz
Files:
a4bae2c35992d7c391faa0eaa33fe761 2756 sound optional
musescore_2.3.2+dfsg2-7~deb10u1.dsc
f85067f65d0f6aecce8cc3283ef85e53 52204 sound optional
musescore_2.3.2+dfsg2-7~deb10u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (MirBSD)
Comment: ☃ ЦΤℱ—８ ☕☂☄
iQIcBAEBCQAGBQJdMcsQAAoJEHa1NLLpkAfgShgP/3b7owh2n5yYkaqlFlwaIeNe
zUl67VMm7mkZhRO9reaMv5SNmug8jlXnAa7tfn+EZuDIO5TYR1HKgAS9W2dtun25
joSsHB2D6j9+NCaRMvfUmwYWPsgJCFisVt+5hkVj75iWJ8uyk6E1v0ZoEcXWL+uN
flZYwBytLzPkmZbVB6q56+aFNPDU4mmQto+8ZOtoxkvTdBVMWbsHgE3feFg0IRFn
O13KtypefgxUWgzFWS9joWQVN2IhZJ4FYwyzP+wWDX54LyvTmVlntBjgBxfoV7je
dOKSlNfkE14bTXKuUupocuIZ3gWQJhPzbrk+AyA8nFmxycM0Lnp7RKqzPG8jhRpV
qKppLiMtR7moWEovDa7sfY9fJU/fiFPfrmaWCIxxu+DmKz9Pf5MS++NY2D3K5qyF
rAlcxnIH6KO9DGDBAbCpC6P8Vj5PvdOTlljdhx8Qyyt+8yTyHMNYTU3gBuYMXO2X
nxTb+7CuN4rXocNf+t2e66ZVLpXIbPSp7ybq5x7N4HvdwMUuMYhv3DTDt2j/QHZG
ZjOdg/jr9EZVGyvaxe+1z7aC8ymT4tPqVjlJkt0YvLohCNsN84I0loXHGLi3jD9K
Xjq9aMvGbqNhK8mipZvChDtnUryflE6qNoYFzBlqD4wLldUBiiazzoc6WVOW1AGn
IDuaYYby6OYZ9OguFqPg
=fbNG
-----END PGP SIGNATURE-----
--- End Message ---
