Bug#729848: kscreensaver: Unlock-session window keeps a typed but forgotten password forever

[r.ductor]

Package: kscreensaver
Version: 4:4.10.5-1
Severity: normal

Dear Maintainer,

It seeems to me that the unlock-session window keeps
a typed but forgotten (i.e. not entered with ENTER)
password forever, if I'm right this is a security breach
cheers

Steps to Reproduce: 
1. lock a KDE session
(or wait enough idle time if automatic lock is on).
(I have also a screen saver enabled, but this should be irrelevant)
2. write the user-password in the unlock form, but DO NOT click ENTER
(e.g. because something distracted you); 
3. wait some time (e.g. exit the room to take a coffee)
3. come back to the unlock and the password is still typed in the form
(you see the black dots), an ENTER is enough to enter the session.
(Security breach: somebody evil arrives and just clicking
ENTER enters your account ...)

Expected Results:
The password form of the unlock-session window
must be cleared after, say,
1 minute from when the last character is entered.
(That was the behavior say one year ago.)

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.10-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages kscreensaver depends on:
ii  kde-runtime   4:4.10.5-1
ii  kde-workspace-bin 4:4.10.5-3
ii  libc6 2.17-92+b1
ii  libgl1-mesa-glx [libgl1]  9.1.6-2
ii  libglu1-mesa [libglu1]9.0.0-1
ii  libkdecore5   4:4.10.5-1
ii  libkdeui5 4:4.10.5-1
ii  libkexiv2-11  4:4.10.5-1
ii  libkio5   4:4.10.5-1
ii  libkparts44:4.10.5-1
ii  libkscreensaver5  4:4.10.5-3
ii  libqt4-opengl 4:4.8.5+dfsg-3
ii  libqtcore44:4.8.5+dfsg-3
ii  libqtgui4 4:4.8.5+dfsg-3
ii  libstdc++64.8.1-2
ii  libx11-6  2:1.6.1-1

Versions of packages kscreensaver recommends:
ii  kde-window-manager4:4.10.5-3
ii  kscreensaver-xsavers  4:4.10.5-1

kscreensaver suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20131118095520.3938.65101.report...@ipht-ia-004976.cea.fr

Bug#729848: PS

[r . ductor]

The bus has been submitted also to KDE, but is marked UNCONFIRMED.
https://bugs.kde.org/show_bug.cgi?id=326633


-- 
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1597021.tdXn63tRkh@ipht-ia-004976

Bug#729363: libkdepim4: circular dependency hell

[Bill Allombert]

On Tue, Nov 12, 2013 at 09:42:36AM -0300, Lisandro Damián Nicanor Pérez Meyer 
wrote:
> On Tuesday 12 November 2013 11:50:15 Bill Allombert wrote:
> > Package: libkdepim4
> > Version: 4:4.11.3-1
> > Severity: important
> > 
> > Hello Debian Qt/KDE Maintainers,
> > 
> > There is a circular dependency hell between libincidenceeditorsng4,
> > libkdepim4, libmailcommon4, libmailimporter4, libmessagecomposer4,
> > libmessageviewer4, libpimcommon4 and libtemplateparser4:
> 
> [snip]
> 
> > The full dependency graph is available at
> > 
> 
> Just for the record, all of them come from the same source and we are not 
> shipping headers for them (so no external packages con build depend on them).

In that case, why put them in separated binary packages where a single one
would do ?

Cheers,
-- 
Bill. 

Imagine a large red swirl here. 


-- 
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20131118104939.GD10513@yellowpig

Bug#729215: an optional package?

[Mte90]

I think that is feature is the best feature of Kate and on Debian still
missing.

An optional package for enable or a document on the debian wiki for install
and compile kate with this feature it's possible?

Bug#729832: qtcreator: Wrong highlighting of a long string literal on multiple lines

[Lisandro Damián Nicanor Pérez Meyer]

tags 729832 upstream
thanks

Hello,

the bug you reported is a KDE bug. Please report it via
Help -> Report bug... menu item of the respective application
or by visiting https://bugs.kde.org/ and following instructions
to report a new bug.

Debian Qt/KDE maintainers do not have resources to deal with
non Debian-specific bugs and therefore it is unlikely that
your bug will be solved if you do not report it to KDE developers
directly (unless it is/has been reported by somebody else).

Whenever you open a bug report on the KDE bug tracking system, or 
you find that the bug has been already reported on it, you can couple 
both this Debian bug and the KDE bug together by sending the mail with 
the text below to cont...@bugs.debian.org (replace KDE-BUG-URL with 
the address of the bug report on https://bugs.kde.org/)

[ copy this ]
forwarded 729832 KDE-BUG-URL
thanks
[ copy this ]

Thank you,
-- 

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/


signature.asc
Description: This is a digitally signed message part.

Processed: Re: Bug#729832: qtcreator: Wrong highlighting of a long string literal on multiple lines

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> tags 729832 upstream
Bug #729832 [qtcreator] qtcreator: Wrong highlighting of a long string literal 
on multiple lines
Added tag(s) upstream.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
729832: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729832
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.1384776354887.transcr...@bugs.debian.org

Bug#729799: ark: Ark forget directory structure when extracting archives

[Maximiliano Curia]

In article <20131117134703.13451.36619.reportbug@calamity-jane> you wrote:
> Package: ark
> Version: 4:4.11.3-1
> Severity: important

>   * What led up to the situation?
> When opening an archive (tested with zip or tar.gz) and I want to extract it 
> to
> a directory.

>   * What exactly did you do (or not do) that was effective (or
> ineffective)?
> Click on extract button, choose a target directory then click ok...

>   * What was the outcome of this action?
> Extraction does work but without the directory structure !

>   * What outcome did you expect instead?
> Correctly extract the archive !

> As a workaround, after the first directory selection (and flat extraction), 
> the
> history ca be used to extract archive correctly !

> Please take care of it, this is an old bug from the 4.10 or before !

I don't see that behavior. Please note that there is a checkbox in the
extraction window that says: "Preserve paths when extracting"

If that's not checked ark won't preserve the directory structure.

-- 
"recursividad 95, 154, 156, 201, 224, 293"
-- El Lenguaje de Programacion C, pag. 293 (Kernighan & Ritchie)
Saludos /\/\ /\ >< `/


--
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20131118121708.ga12...@gnuservers.com.ar

Processed: forwarding a bug

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> forwarded 729832 https://bugreports.qt-project.org/browse/QTCREATORBUG-662
Bug #729832 [qtcreator] qtcreator: Wrong highlighting of a long string literal 
on multiple lines
Set Bug forwarded-to-address to 
'https://bugreports.qt-project.org/browse/QTCREATORBUG-662'.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
729832: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729832
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.13847814124708.transcr...@bugs.debian.org

Processed: [bts-link] source package kdepim

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> #
> # bts-link upstream status pull for source package kdepim
> # see http://lists.debian.org/debian-devel-announce/2006/05/msg1.html
> #
> user bts-link-upstr...@lists.alioth.debian.org
Setting user to bts-link-upstr...@lists.alioth.debian.org (was 
bts-link-de...@lists.alioth.debian.org).
> # remote status report for #722453 (http://bugs.debian.org/722453)
> # Bug title: kmail: Imap server (accounts) ask for kwallet password before 
> kmail is started
> #  * http://bugs.kde.org/show_bug.cgi?id=297615
> #  * remote status changed: RESOLVED -> UNCONFIRMED
> #  * remote resolution changed: INVALID -> (?)
> #  * reopen upstream
> tags 722453 - fixed-upstream
Bug #722453 [kmail] kmail: Imap server (accounts) ask for kwallet password 
before kmail is started
Removed tag(s) fixed-upstream.
> usertags 722453 - status-RESOLVED resolution-INVALID
Usertags were: status-RESOLVED resolution-INVALID.
Usertags are now: .
> usertags 722453 + status-UNCONFIRMED
There were no usertags set.
Usertags are now: status-UNCONFIRMED.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
722453: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722453
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.138479627819640.transcr...@bugs.debian.org

Processed: [bts-link] source package dragon

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> #
> # bts-link upstream status pull for source package dragon
> # see http://lists.debian.org/debian-devel-announce/2006/05/msg1.html
> #
> user bts-link-upstr...@lists.alioth.debian.org
Setting user to bts-link-upstr...@lists.alioth.debian.org (was 
bts-link-de...@lists.alioth.debian.org).
> # remote status report for #658612 (http://bugs.debian.org/658612)
> # Bug title: dragonplayer: should claim support for application/x-cd-image to 
> work with DVD images
> #  * http://bugs.kde.org/show_bug.cgi?id=325164
> #  * remote status changed: CONFIRMED -> RESOLVED
> #  * remote resolution changed: (?) -> FIXED
> #  * closed upstream
> tags 658612 + fixed-upstream
Bug #658612 [dragonplayer] dragonplayer: should claim support for 
application/x-cd-image to work with DVD images
Added tag(s) fixed-upstream.
> usertags 658612 - status-CONFIRMED
Usertags were: status-CONFIRMED.
Usertags are now: .
> usertags 658612 + status-RESOLVED resolution-FIXED
There were no usertags set.
Usertags are now: status-RESOLVED resolution-FIXED.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
658612: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658612
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.138479628119717.transcr...@bugs.debian.org

Processed: [bts-link] source package kde-runtime

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> #
> # bts-link upstream status pull for source package kde-runtime
> # see http://lists.debian.org/debian-devel-announce/2006/05/msg1.html
> #
> user bts-link-upstr...@lists.alioth.debian.org
Setting user to bts-link-upstr...@lists.alioth.debian.org (was 
bts-link-de...@lists.alioth.debian.org).
> # remote status report for #703049 (http://bugs.debian.org/703049)
> # Bug title: kde-runtime: Fix getting the authentication methods
> #  * http://bugs.kde.org/show_bug.cgi?id=314616
> #  * remote status changed: UNCONFIRMED -> RESOLVED
> #  * remote resolution changed: (?) -> FIXED
> #  * closed upstream
> tags 703049 + fixed-upstream
Bug #703049 [kde-runtime] kde-runtime: Fix getting the authentication methods
Added tag(s) fixed-upstream.
> usertags 703049 - status-UNCONFIRMED
Usertags were: status-UNCONFIRMED.
Usertags are now: .
> usertags 703049 + status-RESOLVED resolution-FIXED
There were no usertags set.
Usertags are now: status-RESOLVED resolution-FIXED.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
703049: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703049
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.138479628119735.transcr...@bugs.debian.org

Processed: fixed 703049 in 4:4.10.5-1

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> fixed 703049 4:4.10.5-1
Bug #703049 [kde-runtime] kde-runtime: Fix getting the authentication methods
Marked as fixed in versions kde-runtime/4:4.10.5-1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
703049: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703049
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.138481079216891.transcr...@bugs.debian.org

Processed: found 726756 in kate-syntax-go/2:1.1.2-2, tagging 729875, found 729877 in 3.8.4-4, tagging 725216 ...

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> found 726756 kate-syntax-go/2:1.1.2-2
Bug #726756 [kate-data] kate-data: fails to upgrade from 'sid' - trying to 
overwrite /usr/share/kde4/apps/katepart/syntax/{go, nesc}.xml
The source kate-syntax-go and version 2:1.1.2-2 do not appear to match any 
binary packages
Marked as found in versions kate-syntax-go/2:1.1.2-2.
> tags 729875 + jessie sid
Bug #729875 [src:gdal] gdal: FTBFS: libxml/encoding.h: No such file or directory
Added tag(s) sid and jessie.
> found 729877 3.8.4-4
Bug #729877 [gnome-shell] gdm3: requires kernel with cgroups support
Marked as found in versions gnome-shell/3.8.4-4.
> tags 725216 + sid
Bug #725216 [redmine-plugin-botsfilter] redmine-plugin-botsfilter: Incompatible 
with redmine 2.3
Added tag(s) sid.
> severity 725216 serious
Bug #725216 [redmine-plugin-botsfilter] redmine-plugin-botsfilter: Incompatible 
with redmine 2.3
Severity set to 'serious' from 'important'
> user debian...@lists.debian.org
Setting user to debian...@lists.debian.org (was a...@debian.org).
> usertags 725216 piuparts
There were no usertags set.
Usertags are now: piuparts.
> notfound 725216 1.02
Bug #725216 [redmine-plugin-botsfilter] redmine-plugin-botsfilter: Incompatible 
with redmine 2.3
There is no source info for the package 'redmine-plugin-botsfilter' at version 
'1.02' with architecture ''
Unable to make a source version for version '1.02'
No longer marked as found in versions 1.02.
> found 725216 1.02-2
Bug #725216 [redmine-plugin-botsfilter] redmine-plugin-botsfilter: Incompatible 
with redmine 2.3
Marked as found in versions redmine-plugin-botsfilter/1.02-2.
> usertags 701273 piuparts
Usertags were: piuparts.
Usertags are now: piuparts.
> affects 701273 + liberis-1.3-19-dbg
Bug #701273 [src:eris] eris: ftbfs with GCC-4.8
Added indication that 701273 affects liberis-1.3-19-dbg
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
701273: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701273
725216: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725216
726756: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726756
729875: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729875
729877: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729877
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.138484212027841.transcr...@bugs.debian.org