Your message dated Sat, 31 Jul 2021 20:18:39 +0000
with message-id <[email protected]>
and subject line Bug#989307: fixed in webkit2gtk 2.32.3-1~deb10u1
has caused the Debian Bug report #989307,
regarding DSA-4923-1: upgrading libwebkit2gtk-4.0-37 on buster pulls in 
xdg-desktop-portal
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
989307: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989307
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libwebkit2gtk-4.0-37
Version: 2.32.1-1~deb10u1
Severity: normal

Dear Maintainer,

from #debian-security today, Salvatore asked me to file this as a bug.

< h01ger> DSA 4923 causes xdg-desktop-portal(-gtk) to be installed here, much 
to my surprise and unhappyness
< h01ger> its a recommends, so i can apt remove it, but still...
< h01ger> https://paste.debian.net/1199471/
(which has this content)

Reading package lists...
Building dependency tree...
Reading state information...
Calculating upgrade...
The following NEW packages will be installed:
   libpipewire-0.2-1 (0.2.5-1)
   xdg-desktop-portal (1.2.0-1)
   xdg-desktop-portal-gtk (1.2.0-1)
The following packages will be upgraded:
   libjavascriptcoregtk-4.0-18 (2.30.6-1~deb10u1 => 2.32.1-1~deb10u1)
   libwebkit2gtk-4.0-37 (2.30.6-1~deb10u1 => 2.32.1-1~deb10u1)
2 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
Need to get 20.1 MB of archives.
After this operation, 5,376 kB of additional disk space will be used.
Do you want to continue? [Y/n] 

< carnil> h01ger: thanks forwarded to alberto
        * h01ger still busy cleaning systems
< h01ger> carnil: thanks!
< carnil> h01ger: the problem which is to be solved with it is apparently 
https://bugzilla.redhat.com/show_bug.cgi?id=1845743 (according to berto)
< h01ger> carnil: seems like. i've no flatpak and no snap and i dont expect to 
gain a dbus service granting privileges on a buster security update. (i've also 
seen it on bullseye upgrades but given that bullseye is not stable yet i wont 
complain here :)
< h01ger> carnil: do you think it would be useful if i'd file a bug about this 
issue?
< carnil> h01ger: at least the maintainer could comment himself on it, and 
explain on why the recommends, and maybe discussion can lead to that change is 
not suitable for the DSA, and we can drop it in the next upload.
< h01ger> carnil: was that a yes?
< carnil> h01ger: yes
< h01ger> carnil: ok. i'll include some lines from you here...
< carnil> h01ger: yes. I have no proplem if you mention I suggested to fill a 
but to ask to clarify the issue. But note I was only inbetween here.


Personally I think a DSA fixing this would be nice.

-- 
cheers,
        Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

"Climate change" is an euphenism. "Global warming" as well.

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message ---
Source: webkit2gtk
Source-Version: 2.32.3-1~deb10u1
Done: Alberto Garcia <[email protected]>

We believe that the bug you reported is fixed in the latest version of
webkit2gtk, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alberto Garcia <[email protected]> (supplier of updated webkit2gtk package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 28 Jul 2021 11:01:56 +0200
Source: webkit2gtk
Architecture: source
Version: 2.32.3-1~deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Debian WebKit Maintainers 
<[email protected]>
Changed-By: Alberto Garcia <[email protected]>
Closes: 989307
Changes:
 webkit2gtk (2.32.3-1~deb10u1) buster-security; urgency=medium
 .
   * Rebuild for buster-security.
   * debian/patches/force-single-process.patch:
     + Force the single-process mode in Evolution and Geary
   * debian/control:
     + Remove Breaks for Evolution < 3.34.1.
     + Remove build dependency on libwpebackend-fdo-1.0-dev and
       libmanette-0.2-dev.
     + Switch build dependency from libenchant-2-dev to libenchant-dev.
     + Switch build dependencies on libgl-dev and libgles-dev with
       libgl1-mesa-dev and libgles2-mesa-dev.
   * Downgrade xdg-desktop-portal-gtk from a recommendation to a
     suggestion (Closes: #989307)
   * debian/rules:
     + Build with -DENABLE_GAMEPAD=OFF (as libmanette is missing).
Checksums-Sha1:
 11cfeae9308a5c58048c31c112c291f3eb75ede8 4271 webkit2gtk_2.32.3-1~deb10u1.dsc
 9c9b2cb2638ea40706765768dd5cb3c95ab46dcb 23323972 webkit2gtk_2.32.3.orig.tar.xz
 9c584ddcbce02e279fc0efa103cfcd3f4a513ba9 195 webkit2gtk_2.32.3.orig.tar.xz.asc
 6e200586fdc677fa5bc8c130ece9252e89fb86dd 73976 
webkit2gtk_2.32.3-1~deb10u1.debian.tar.xz
 3e732cfb2866b8f2dcd44f6f8063dd1e861da56b 15902 
webkit2gtk_2.32.3-1~deb10u1_source.buildinfo
Checksums-Sha256:
 e5a6ae2ff5a79c5e5d778be1b780a5481cb40a2e63f7b055c920790c637ffa35 4271 
webkit2gtk_2.32.3-1~deb10u1.dsc
 c1f496f5ac654efe4cef62fbd4f2fbeeef265a07c5e7419e5d2900bfeea52cbc 23323972 
webkit2gtk_2.32.3.orig.tar.xz
 8b152d27d5ef1bc2f716cfd1c3a99b806d76774f01e8af1831d6f4387ca297cd 195 
webkit2gtk_2.32.3.orig.tar.xz.asc
 a13f60d3fbf415afeed31c524196075d691bfb2eacdeb6fa4ec5f2b5cbb95e55 73976 
webkit2gtk_2.32.3-1~deb10u1.debian.tar.xz
 cedd5c39edb9b87d69f19e9e9c3908e83cf151d8a6da1c3e146b6c06771e018d 15902 
webkit2gtk_2.32.3-1~deb10u1_source.buildinfo
Files:
 761dfc654a688564d10889abbf4445d0 4271 web optional 
webkit2gtk_2.32.3-1~deb10u1.dsc
 f31b802de421865ea9f1391ec8190519 23323972 web optional 
webkit2gtk_2.32.3.orig.tar.xz
 b4dc4d0666bbd1f130158fe9011ec1d8 195 web optional 
webkit2gtk_2.32.3.orig.tar.xz.asc
 d9e36a6d0dbc5c17c4d38841b4c27b43 73976 web optional 
webkit2gtk_2.32.3-1~deb10u1.debian.tar.xz
 1600362c355da61217968bcfe7b410b8 15902 web optional 
webkit2gtk_2.32.3-1~deb10u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=0Ajv
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to