This bug was fixed in the package gstm - 1.2-7
---
gstm (1.2-7) unstable; urgency=low
* Remove gaskpass. gaskpass is just another ssh askpass program, and
doesn't do anything special. It does not grab focus, which means
that key loggers can listen in on what you type, aiui.
okay, fix uploaded to Debian.
I dunno when it will be merged into Ubuntu, but ya...:/
--
gstm should drop gaskpass and Depend: ssh-askpass
https://bugs.launchpad.net/bugs/276534
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-
okay, the bugs were a bit unclear about the actual problem so I did not
understand properly. I do now, and will remove gaskpass.
Thanks,
Ryan
** Changed in: gstm (Ubuntu)
Assignee: (unassigned) => Ryan Niebur (ryan52)
Status: Won't Fix => In Progress
--
gstm should drop gaskpass an
I think i agree with trochee here. Those four bugs were filed within a
few hours of each other, the result of a quick audit. If, as Ryan says,
these are trivial to fix, it makes me wonder how many more serious, non-
trivial problems would be uncovered by a more in-depth audit.
Since these trivia
I believe it is a mistake to maintain a separate security-sensitive
application (asking for passwords) inside a tangentially-related
package, when a perfectly good -- and well-maintained -- programs exist
for the same purpose. ssh-askpass-gnome is even part of openssh, which
is (I think) necessary
** Changed in: gstm (Ubuntu)
Importance: Undecided => Wishlist
Status: Invalid => Won't Fix
--
gstm should drop gaskpass and Depend: ssh-askpass
https://bugs.launchpad.net/bugs/276534
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubun
Since all of these bugs are extremely trivial to fix, I will just fix
the bugs themselves and not replace gaskpass.
Thanks, though.
-- Ryan
** Changed in: gstm (Ubuntu)
Status: New => Invalid
--
gstm should drop gaskpass and Depend: ssh-askpass
https://bugs.launchpad.net/bugs/276534
Y
I've attached a patch that removes the calls to gaskpass and changes the
Depends: accordingly.
** Attachment added: "does not alter SSH_ASKPASS; Depends: ssh-askpass"
http://launchpadlibrarian.net/18097624/gstm_1.2-4.trochee1.debdiff
--
gstm should drop gaskpass and Depend: ssh-askpass
https:
** Summary changed:
- gstem should drop gaskpass and Depend: ssh-askpass
+ gstm should drop gaskpass and Depend: ssh-askpass
--
gstm should drop gaskpass and Depend: ssh-askpass
https://bugs.launchpad.net/bugs/276534
You received this bug notification because you are a member of Ubuntu
Bugs, whi
