Your message dated Fri, 17 Jan 2025 16:17:39 -0500
with message-id
<CAD+GYvwa8iSkQkg-ZQET_Pp++VPvsbA9=abu-oqauyra_kt...@mail.gmail.com>
and subject line Re: depends on gstreamer-plugins-bad, which is an ongoing
source of security holes
has caused the Debian Bug report #847417,
regarding depends on gstreamer-plugins-bad, which is an ongoing source of
security holes
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
847417: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847417
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gnome-video-effects
Version: 0.4.1-3
Severity: normal
gstreamer-plugins-bad has been in the news at least twice recently for
security holes.
http://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-compromising-linux-desktop.html
https://scarybeastsecurity.blogspot.dk/2016/11/0day-poc-risky-design-decisions-in.html
It seems likely that it will continue to be a source of such security
holes.
I wanted to remove gstreamer-plugins-bad from my system, but this would
remove gnome-video-effects, which would remove cheese. I don't know why
cheese needs a ton of insecurely implemented codecs for playing Nintendo
games etc in order to take snapshots and record videos. Probably it doesn't?
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages gnome-video-effects depends on:
ii gstreamer1.0-plugins-bad 1.10.0-1
ii gstreamer1.0-plugins-good 1.10.0-1
gnome-video-effects recommends no packages.
Versions of packages gnome-video-effects suggests:
pn gnome-video-effects-frei0r <none>
-- no debconf information
--
see shy jo
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
This isn't really actionable on the part of gnome-video-effects since
there are many Debian packages that use gstreamer-plugins-bad, so I'm
closing this bug.
Thank you,
Jeremy Bícha
--- End Message ---
