Your message dated Wed, 21 Oct 2020 17:04:16 +0000
with message-id <[email protected]>
and subject line Bug#967678: fixed in packagekit 1.2.1-1
has caused the Debian Bug report #967678,
regarding packagekit: depends on deprecated GTK 2
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
967678: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=967678
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: packagekit
Severity: normal
User: [email protected]
Usertags: gtk2 oldlibs
Control: block 947713 by -1
This package has Build-Depends on GTK 2 (libgtk2.0-dev), or produces
binary packages with a Depends on GTK 2.
GTK 2 was superseded by GTK 3 in 2011 (see
<https://bugs.debian.org/947713>). It no longer receives any significant
upstream maintenance, and in particular does not get feature development
for new features like UI scaling on high-pixel-density displays (HiDPI)
and native Wayland support. GTK 3 is in maintenance mode and GTK 4 is
approaching release, so it seems like a good time to be thinking about
minimizing the amount of GTK 2 in the archive.
GTK 2 is used by some important productivity applications like GIMP, and
has also historically been a popular UI toolkit for proprietary software
that we can't change, so perhaps removing GTK 2 from Debian will never be
feasible. However, it has reached the point where a dependency on it is
a bug - not a release-critical bug, and not a bug that can necessarily
be fixed quickly, but a piece of technical debt that maintainers should
be aware of.
A porting guide is provided in the GTK 3 documentation:
https://developer.gnome.org/gtk3/stable/migrating.html
Some libraries (for example libgtkspell0) expose GTK as part of their
API/ABI, in which case removing the deprecated dependency requires
breaking API/ABI. For these libraries, in many cases there will already
be a corresponding GTK 3 version (for example libgtkspell3-3-0), in which
case the GTK 2-based library should probably be deprecated or removed
itself. If there is no GTK 3 equivalent, of a GTK 2-based library,
maintainers should talk to the dependent library's upstream developers
about whether the dependent library should break API/ABI and switch
to GTK 3, or whether the dependent library should itself be deprecated
or removed.
A few packages extend GTK 2 by providing plugins (theme engines, input
methods, etc.) or themes, for example ibus and mate-themes. If these
packages deliberately support GTK 2 even though it is deprecated, and
they also support GTK 3, then it is appropriate to mark this mass-filed
bug as wontfix for now. I have tried to exclude these packages from
the mass-bug-filing, but I probably missed some of them.
Regards,
smcv
--- End Message ---
--- Begin Message ---
Source: packagekit
Source-Version: 1.2.1-1
Done: Matthias Klumpp <[email protected]>
We believe that the bug you reported is fixed in the latest version of
packagekit, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Matthias Klumpp <[email protected]> (supplier of updated packagekit package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 21 Oct 2020 18:26:38 +0200
Source: packagekit
Architecture: source
Version: 1.2.1-1
Distribution: unstable
Urgency: medium
Maintainer: Matthias Klumpp <[email protected]>
Changed-By: Matthias Klumpp <[email protected]>
Closes: 952872 967678 972229
Changes:
packagekit (1.2.1-1) unstable; urgency=medium
.
[ Matthias Klumpp ]
* New upstream version: 1.2.1
* Drop all previous patches: Applied upstream.
* Add aptcc-use-pkgconfig.patch: Fix build with newer APT versions,
and simplify dependency on apt-pkg .
* Add aptcc-build-debconfhelper.patch: Build debconf socket-activated
helper again now that PK builds with Meson.
* Add aptcc-CVE-2020-16122.patch: Always distrust local .deb packages
* Add fix-CVE-2020-16121.patch: Resolve information disclosure in
InstallFiles, GetFilesLocal and GetDetailsLocal (Closes: #972229)
* Add test-install-missing-files.patch: Install some missing files used
by the test backend that have been forgotten in the Meson transition.
* Adjust packaging for using the Meson build system
* Cleanup d/rules, a lot of files we previously removed are gone now
by upstream default
* d/control: Update dependencies for new release
* Drop build-dep on xmlto and docbook-utils (no longer needed)
* Remove last remnants of the GTK+2 plugin (Closes: #967678)
* Update .symbols file
.
[ Laurent Bigonville ]
* Do not try to install pk-debconf-helper on non-linux architectures
(Closes: #952872)
* Move daemon and helper binaries to /usr/libexec
Checksums-Sha1:
2df83c80620bccd9b62be752d940059c0f17a70a 2968 packagekit_1.2.1-1.dsc
dc4f34b0e73ea17de9a819d4dc9b92e835fff61b 2743568 packagekit_1.2.1.orig.tar.xz
79f596defcb5ce8ba660b6f51863fc5b8e546941 26300 packagekit_1.2.1-1.debian.tar.xz
37913b4769624bda299ecf8438a3fd349de07ab7 16389
packagekit_1.2.1-1_source.buildinfo
Checksums-Sha256:
9f2d0ef4eb2063a7cdca959f0c96731f6cf309070eb2ad13d4ef173633d9efd4 2968
packagekit_1.2.1-1.dsc
d9b514747fad86fd75dce2af1f9fc28a3e086ec98c06c130880c7871ed5a27e1 2743568
packagekit_1.2.1.orig.tar.xz
d0f8198dc5e14b8199899f7a4c9ec4e37aa243483f55d580be6316feb34a9ced 26300
packagekit_1.2.1-1.debian.tar.xz
2a5eaae182b41f43f63fba805f8b3fae125b226e86720c55687ef76e8fc54616 16389
packagekit_1.2.1-1_source.buildinfo
Files:
d5b67e9893ee8a2a09251ae7bccec3a5 2968 admin optional packagekit_1.2.1-1.dsc
a0a1f7c45d25901cf4ff4318405610c3 2743568 admin optional
packagekit_1.2.1.orig.tar.xz
a80b9aec567f11e15859a13ee3a08758 26300 admin optional
packagekit_1.2.1-1.debian.tar.xz
8856bc2d5d42daf26e9db4638d1f9605 16389 admin optional
packagekit_1.2.1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=llyr
-----END PGP SIGNATURE-----
--- End Message ---