Bug#840147: gajim: another home-phoning bug (in proxy65_manager) (privacy violation)

2017-12-16 Thread W. Martin Borgert
In current versions of Gajim, the test is disabled by default.
(One can set the config variable test_ft_proxies_on_startup to
True, however, to enable the test.)



Bug#840147: gajim: another home-phoning bug (in proxy65_manager) (privacy violation)

2017-10-05 Thread Yann Leboulanger

Why in a bad way?

--
Yann



Bug#840147: gajim: another home-phoning bug (in proxy65_manager) (privacy violation)

2016-10-08 Thread Dominik George
Package: gajim
Version: 0.16.6-1
Severity: important
Tags: upstream

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

By coincidence, reading my XMPP server log, I found another phone home bug in 
Gajim:

2016-10-08 22:07:16.547 [info] <0.494.0>@mod_proxy65_stream:activate:125 
(<0.1029.0>:<0.1028.0>) Activated bytestream for n...@naturalnet.de/Gajim -> 
t...@gajim.org/test2

Oops, look as though upon connecting to my XMPP server, Gajim does a
test to see whether the bytestream proxy works, and does so in a bad
way.

Seems to happen in src/common/proxy65_manager.py.

- -- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: systemd (via /run/systemd/system)

Versions of packages gajim depends on:
ii  dnsutils1:9.10.3.dfsg.P4-10.1
ii  python-gtk2 2.24.0-5
ii  python-nbxmpp   0.5.3-1
ii  python-openssl  16.1.0-1
ii  python-pyasn1   0.1.9-2
pn  python:any  

Versions of packages gajim recommends:
ii  alsa-utils  1.1.2-1
ii  ca-certificates 20160104
ii  dbus1.10.10-1
ii  notification-daemon 3.20.0-1
ii  plasma-workspace [notification-daemon]  4:5.7.4-1
ii  pulseaudio-utils9.0-3
ii  python-crypto   2.6.1-6+b1
ii  python-dbus 1.2.4-1
ii  sox 14.4.1-5+b1

Versions of packages gajim suggests:
ii  aspell-de [aspell-dictionary]   20160407-1
ii  aspell-de-1901 [aspell-dictionary]  1:2-31
ii  aspell-en [aspell-dictionary]   2016.06.26-0-0.1
ii  avahi-daemon0.6.32-1
ii  dvipng  1.14-2+b2
pn  gnome-keyring   
ii  gstreamer0.10-plugins-ugly  0.10.19-2.1+b3
ii  kwalletcli  3.00-1
ii  libgtkspell02.0.16-1.1
ii  libxss1 1:1.2.2-1
pn  nautilus-sendto 
ii  network-manager 1.4.2-1
ii  python-avahi0.6.32-1
ii  python-gconf2.28.1+dfsg-1.1
ii  python-gnome2   2.28.1+dfsg-1.1
pn  python-gnomekeyring 
ii  python-gupnp-igd0.2.4-1
pn  python-kerberos 
ii  python-pycurl   7.43.0-1
ii  texlive-latex-base  2016.20160819-2

- -- no debconf information

-BEGIN PGP SIGNATURE-
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=PGiM
-END PGP SIGNATURE-