Bug#799186: konqueror: now comes with built-in keylogger
retitle 799186 kdelibs/ktextedit: keypresses are logged reassign 799186 libkdeui5 kde4libs/4:4.14.10-3 thanks On Wed, 16 Sep 2015 23:04:24 +0200 M4:4.14.13-1artin Steigerwald wrote: > Am Mittwoch, 16. September 2015, 22:55:23 CEST schrieb Dominik George: > > > I think this is an upstream bug â of course I´d go for fixing it in > > > Debian > > > without waiting for upstream fix. > > > > > > Thorsten, will you report upstream as well? > > > > I could do, because I am active in the KDE bugtracker. > > Sure, go ahead. It might be wise to search for the kdelibs4.11 fix first > though, see my last mail to the bug report. > I didn't find an upstream bug, but this issue was fixed in kdelibs commit 150d983674e9d61e2809316e062e5d91c7855609, see: https://quickgit.kde.org/?p=kdelibs.git&a=commit&h=150d983674e9d61e2809316e062e5d91c7855609 This commit is part of any kdelibs >= 4.14.11. Right now 4.14.13 is available in sid and testing. I also tried the steps described above (go to a website with a text area, like pastebin.com, using the KHTML part) and indeed no keys are logged anymore. Therefore I'm going to close this bug. Ciao -- Luigi
Processed: Re: Bug#799186: konqueror: now comes with built-in keylogger
Processing commands for cont...@bugs.debian.org: > retitle 799186 kdelibs/ktextedit: keypresses are logged Bug #799186 [konqueror] konqueror: now comes with built-in keylogger Changed Bug title to 'kdelibs/ktextedit: keypresses are logged' from 'konqueror: now comes with built-in keylogger' > reassign 799186 libkdeui5 kde4libs/4:4.14.10-3 Bug #799186 [konqueror] kdelibs/ktextedit: keypresses are logged Bug reassigned from package 'konqueror' to 'libkdeui5'. No longer marked as found in versions kde-baseapps/4:15.04.3-1. Ignoring request to alter fixed versions of bug #799186 to the same values previously set Bug #799186 [libkdeui5] kdelibs/ktextedit: keypresses are logged Marked as found in versions kde4libs/4:4.14.10-3. > thanks Stopping processing here. Please contact me if you need assistance. -- 799186: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799186 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#799186: marked as done (kdelibs/ktextedit: keypresses are logged)
Your message dated Sat, 14 Nov 2015 16:27:38 +0100 with message-id <564752ea.4080...@tiscali.it> and subject line Closing bug 799186, solved has caused the Debian Bug report #799186, regarding kdelibs/ktextedit: keypresses are logged to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 799186: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799186 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: konqueror Version: 4:15.04.3-1 Severity: grave Tags: security Justification: user security hole I was just typing a geocaching log in a konqueror that popped up when activating a link in a mail (to the cache listing) and noticed small decimal digits scrolling by, one on a line, in the xterm that was not fully hidden from view by the konqueror window. Sometimes, the number was 32. I was on full alert. Natureshadow managed to reproduce this on sid amd64, so it’s not an x32 issue, although he had to switch back to KHTML from Webkit (via menu V̲iew → V̲iew Mode → K̲HTML) to reproduce it. Shortest reproducer, even if using a proprietary service: $ konqueror pastebin.com Then just start typing (after switching to KHTML if needed). -- System Information: Debian Release: stretch/sid APT prefers unreleased APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable') Architecture: x32 (x86_64) Foreign Architectures: i386, amd64 Kernel: Linux 4.1.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/lksh Init: sysvinit (via /sbin/init) Versions of packages konqueror depends on: ii install-info6.0.0.dfsg.1-3 ii kde-baseapps-bin4:15.04.3-1 ii kde-baseapps-data 4:15.04.3-1 ii kde-runtime 4:15.08.0-2 ii libc6 2.19-20 ii libkactivities6 4:4.13.3-1 ii libkcmutils44:4.14.10-3 ii libkde3support4 4:4.14.10-3 ii libkdecore5 4:4.14.10-3 ii libkdesu5 4:4.14.10-3 ii libkdeui5 4:4.14.10-3 ii libkfile4 4:4.14.10-3 ii libkhtml5 4:4.14.10-3 ii libkio5 4:4.14.10-3 ii libkonq5abi14:15.04.3-1 ii libkonqsidebarplugin4a 4:15.04.3-1 ii libkparts4 4:4.14.10-3 ii libqt4-dbus 4:4.8.7+dfsg-3 ii libqt4-qt3support 4:4.8.7+dfsg-3 ii libqt4-xml 4:4.8.7+dfsg-3 ii libqtcore4 4:4.8.7+dfsg-3 ii libqtgui4 4:4.8.7+dfsg-3 ii libstdc++6 5.2.1-17 ii libx11-62:1.6.3-1 Versions of packages konqueror recommends: ii dolphin 4:15.04.3-1 ii kfind4:15.04.3-1 pn konqueror-nsplugins ii kpart-webkit 1.3.4-2 Versions of packages konqueror suggests: ii konq-plugins 4:15.04.3-1 -- no debconf information --- End Message --- --- Begin Message --- Source: kde4libs Source-Version: 4:4.14.12-1 Closing as previously explained. -- Luigi--- End Message ---
Just lost my digikam -- no longer installable :-(
Hi, For the first time since GCC-5 hit in July, I got brave enough to upgrade my machine. All looks good except that I lost digikam in the process :-( I'm a DD and willing to help out with uploads. Where can I start? The present package is not installable and, judging from the BTS, not buildable. The last upload is about a year ago, though I see 4.12 in the VCS (2 months ago). Upstream released 4.14 a month ago. However it's unclear to me whether a 4.x version will even work with Sid's libraries (KDE Frameworks 5.13, Plasma 5.4 and Applications 15.04, according to https://wiki.debian.org/KDE). Would one be better off with the beta of Digikam 5.x? I'm a little nervous trusting my picture collection to beta software. So where to start: 4.12, 4.14, or 5.0? Advice appreciated. Thanks, -Steve signature.asc Description: This is a digitally signed message part.
Bug#805096: libphonon4qt5-dev: PhononTargets.cmake make reference of non existing libraries libphonon4qt5experimental.so.4.8.3
Package: libphonon4qt5-dev Version: 4:4.8.3-2 Severity: normal Trying to manually compile digikam I get this error: CMake Error at /usr/lib/x86_64-linux-gnu/cmake/phonon4qt5/PhononTargets.cmake:85 (message): The imported target "Phonon::phonon4qt5experimental" references the file "/usr/lib/x86_64-linux-gnu/libphonon4qt5experimental.so.4.8.3" The experimental in the name seems to be a leftover -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.1.13 (SMP w/8 CPU cores; PREEMPT) Locale: LANG=fr_FR.UTF8, LC_CTYPE=fr_FR.UTF8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Init: sysvinit (via /sbin/init) Versions of packages libphonon4qt5-dev depends on: ii libc62.21-0experimental2 ii libphonon4qt5-4 4:4.8.3-2 ii libqt5core5a 5.5.1+dfsg-6 ii libqt5designer5 5.5.1-3 ii libqt5gui5 5.5.1+dfsg-6 ii libqt5widgets5 5.5.1+dfsg-6 ii libstdc++6 5.2.1-23 ii phonon4qt5 4:4.8.3-2 libphonon4qt5-dev recommends no packages. libphonon4qt5-dev suggests no packages. -- no debconf information
Re: Just lost my digikam -- no longer installable :-(
On 14/11/2015 18:03, Steve M. Robbins wrote: So where to start: 4.12, 4.14, or 5.0? 4.x is for QT4, so for kde5, you should use 5.0 Advice appreciated. Folow the instruction at https://www.digikam.org/download/GIT ./bootstrap.linux is by far the trickest part as you need a lot of dev stuff that +some packages are not available in debian yet: 1) a recent kipi that comes with digikam but that yo should install first 2) opencv 3.0.0 that you should manaully compile that in turn needs libopenexr22 (that is in unstable) 3) libkqoauth-dev that I picked up from ubuntu + some hacking for multi-arch 4) I have managed doing this to compile almost until the end but I have an unresolved when compiling an obscure test that I still need to fix. 91%] Building CXX object core/tests/geolocation/editor/CMakeFiles/geolocationedit_test_gpsimageitem.dir/test_gpsimageitem.cpp.o /usr/bin/ld: ../../app/libdigikamcore.so.5.0.0: référence au symbole non défini «_ZNK16KLocalizedString4subsERK7QStringi5QChar» //usr/lib/x86_64-linux-gnu/libKF5I18n.so.5: error adding symbols: DSO missing from command line collect2: error: ld returned 1 exit status core/tests/facesengine/CMakeFiles/traindb.dir/build.make:137: recipe for target 'core/tests/facesengine/traindb' failed make[2]: *** [core/tests/facesengine/traindb] Error 1 -- eric
Bug#800821: dolphin itself shows no files
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804750. I suspect the same bug here. On 21 October 2015 at 07:23, Bryan Cebuliak wrote: > The bug regarding Konqueror is fixed by dolphin4. However, > the latest dolphin 4:15.08.2-1 itself shows no files icons on any > view on my lxde desktop. >
Failure: chroot-installation_sid_install_kde/1037
See https://jenkins.debian.net/job/chroot-installation_sid_install_kde/1037//console or just https://jenkins.debian.net/job/chroot-installation_sid_install_kde/1037/ for more information.
Failure: chroot-installation_sid_install_kde-full/940
See https://jenkins.debian.net/job/chroot-installation_sid_install_kde-full/940//console or just https://jenkins.debian.net/job/chroot-installation_sid_install_kde-full/940/ for more information.
