Your message dated Sat, 29 Oct 2011 14:47:52 +0000
with message-id <[email protected]>
and subject line Bug#632771: fixed in nautilus-dropbox 0.7.0-1
has caused the Debian Bug report #632771,
regarding nautilus-dropbox: should verify GPG signature of downloaded tarball
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
632771: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632771
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: nautilus-dropbox
Version: 0.6.7-1
Severity: wishlist
Tags: upstream
Dropbox now provides a GPG signature of the downloaded tarball
at: http://www.dropbox.com/download?plat=lnx.x86_64&signature=1
and http://www.dropbox.com/download?plat=lnx.x86&signature=1
The public key is at http://linux.dropbox.com/fedora/rpm-public-key.asc
nautilus-dropbox should be updated to verify this signature when possible
(i.e. when the key is available at some predefined place) and to fail if
the signature isn't valid.
I have not yet checked whether it has already been done in
nautilus-dropbox 0.6.8.
Cheers,
-- System Information:
Debian Release: wheezy/sid
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500,
'unstable'), (500, 'testing'), (500, 'stable'), (150, 'experimental')
Architecture: i386 (x86_64)
Kernel: Linux 2.6.39-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages nautilus-dropbox depends on:
ii libatk1.0-0 2.0.1-2 ATK accessibility toolkit
ii libc6 2.13-10 Embedded GNU C Library: Shared lib
ii libcairo-gobject2 1.10.2-6 The Cairo 2D vector graphics libra
ii libcairo2 1.10.2-6 The Cairo 2D vector graphics libra
ii libfontconfig1 2.8.0-3 generic font configuration library
ii libfreetype6 2.4.4-2 FreeType 2 font engine, shared lib
ii libgdk-pixbuf2.0-0 2.23.5-1 GDK Pixbuf library
ii libglib2.0-0 2.28.6-2 GLib library of C routines
ii libgtk-3-0 3.0.10-1 GTK+ graphical user interface libr
ii libnautilus-extension1a 3.0.2-2 libraries for nautilus components
ii libpango1.0-0 1.28.4-1 Layout and rendering of internatio
ii procps 1:3.2.8-10 /proc file system utilities
ii python 2.6.6-14 interactive high-level object-orie
ii python-gtk2 2.24.0-2 Python bindings for the GTK+ widge
nautilus-dropbox recommends no packages.
Versions of packages nautilus-dropbox suggests:
ii nautilus 3.0.2-2 file manager and graphical shell f
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: nautilus-dropbox
Source-Version: 0.7.0-1
We believe that the bug you reported is fixed in the latest version of
nautilus-dropbox, which is due to be installed in the Debian FTP archive:
nautilus-dropbox_0.7.0-1.debian.tar.bz2
to non-free/n/nautilus-dropbox/nautilus-dropbox_0.7.0-1.debian.tar.bz2
nautilus-dropbox_0.7.0-1.dsc
to non-free/n/nautilus-dropbox/nautilus-dropbox_0.7.0-1.dsc
nautilus-dropbox_0.7.0-1_i386.deb
to non-free/n/nautilus-dropbox/nautilus-dropbox_0.7.0-1_i386.deb
nautilus-dropbox_0.7.0.orig.tar.bz2
to non-free/n/nautilus-dropbox/nautilus-dropbox_0.7.0.orig.tar.bz2
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Raphaël Hertzog <[email protected]> (supplier of updated nautilus-dropbox
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 28 Oct 2011 20:32:45 +0200
Source: nautilus-dropbox
Binary: nautilus-dropbox
Architecture: source i386
Version: 0.7.0-1
Distribution: unstable
Urgency: low
Maintainer: Raphaël Hertzog <[email protected]>
Changed-By: Raphaël Hertzog <[email protected]>
Description:
nautilus-dropbox - Dropbox integration for Nautilus
Closes: 632771
Changes:
nautilus-dropbox (0.7.0-1) UNRELEASED; urgency=low
.
* New upstream version.
* Drop use-system-rst2man.patch, merged upstream.
* Refresh all other patches.
* This version implements a GPG verification of the tarball
downloaded from dropbox.com. Closes: #632771
The wrapper needs python-gpgme to perform this check, so
add it to the dependencies.
* Switch to debhelper compatibility level 9 in order to benefit
from the hardening build flags.
* Use dh --with=python2 since previous change dropped usage of
python-support.
* Use -Wl,--as-needed to drop unnecessary libraries linked into the plugin.
This requires dh-autoreconf's ability to patch ltmain.sh. Thus add
it to the Build-Depends field.
* New patch to remove files that will be overwritten by the unpack
to avoid failures with ETXTBUSY. LP: #818014
* New patch to ask for root rights when we have to install dropbox as
user. LP: #821212
Add dependency on policykit-1 since the patch makes use of pkexec.
* Thanks to this, we don't have to ensure that the download succeeds
in the postinst. LP: #876340
* Update fix-path-of-desktop-file.patch to be upstreamable.
Checksums-Sha1:
3d2e28f2056b8312b216f9898bd13cf8d462fca5 2145 nautilus-dropbox_0.7.0-1.dsc
1b6764b15cfca95a49771b3fd4ed64062b94085c 353719
nautilus-dropbox_0.7.0.orig.tar.bz2
8cb3f13b36df221c5256b7e54e08b4ab0cb2359a 11960
nautilus-dropbox_0.7.0-1.debian.tar.bz2
b26dfe1c60c7e18e979f8094cad196b59d3fb015 102366
nautilus-dropbox_0.7.0-1_i386.deb
Checksums-Sha256:
5266e8c4b3943b1814caf530ee3edbcedb6040d998d629030769674092f3140b 2145
nautilus-dropbox_0.7.0-1.dsc
4fe171760c897c0ab4166cea70f8587623f72c616ef66ea7d81565b702322daa 353719
nautilus-dropbox_0.7.0.orig.tar.bz2
32b352075503c44f350f7097ffa59585b07dd06df744b483541552a1a64321da 11960
nautilus-dropbox_0.7.0-1.debian.tar.bz2
707a29edadafea9127e9361b66ca0e2f8ab5005d141835ac07004db575038e10 102366
nautilus-dropbox_0.7.0-1_i386.deb
Files:
78462b6e146b86425c39a2389f7949ed 2145 non-free/gnome optional
nautilus-dropbox_0.7.0-1.dsc
0aabb7f09b21c26a739538de68ada3c5 353719 non-free/gnome optional
nautilus-dropbox_0.7.0.orig.tar.bz2
a0d8b2f287e313eab2b6bd1d5e76afcc 11960 non-free/gnome optional
nautilus-dropbox_0.7.0-1.debian.tar.bz2
38927eb2f91089acfe367406c0dd188f 102366 non-free/gnome optional
nautilus-dropbox_0.7.0-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Signed by Raphael Hertzog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=EcKe
-----END PGP SIGNATURE-----
--- End Message ---