Your message dated Sat, 18 Mar 2017 12:50:53 +0000
with message-id <[email protected]>
and subject line Bug#858058: fixed in mat 0.6.1-4
has caused the Debian Bug report #858058,
regarding mat: "Clean metadata" contextual menu silently fails
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
858058: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858058
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mat
Version: 0.6.1-3
Severity: important
Hi,
I found this bug while working the upcoming version of Tails based on
Stretch but I could also reproduce it in Debian Stretch. MAT can be used
through 2 different paths from the standalone GUI or from the contextual
menu in Nautilus. This bug affects the contextual menu in Nautilus.
Steps to reproduce in GNOME:
* Open MAT.
* Press the *PrintScreen* key to take a screenshot.
* Navigate to ~/Pictures.
* Drag and drop the screenshot in MAT.
* The screenshot is marked as **Dirty** in MAT (as expected) as the
metadata of the file include "Software: gnome-screenshot".
* Right-click on the screenshot in Nautilus and choose **Clean metadata**.
* Result: I got no feedback (while in previous version a backup copy was
created which provided visual feedback about the success of the
operation).
* Drag and drop again the screen in MAT.
* The screenshot is still marked as **Dirty** in MAT and still has the
"Software: gnome-screenshot". That's the bug.
* Click on the screenshot in MAT to select it. Click on the **Clean**
button and the screenshot gets marked as **Clean** (as expected).
I'm flagging this as "important" for the time being but I think that
it's a serious security issue since people might got use to clean
metadata from backup file in comparison with the version in Jessie. So,
in my opinion, and if I understood correctly, this renders MAT useless
for probably most of its actual uses.
-- System Information:
Debian Release: 9.0
APT prefers testing
APT policy: (990, 'testing')
Architecture: 1489780924 WARNING torsocks[11141]: [syscall] Unsupported syscall
number 217. Denying the call (in tsocks_syscall() at syscall.c:488)
amd64 (x86_64)
Foreign Architectures: 1489780924 WARNING torsocks[11143]: [syscall]
Unsupported syscall number 217. Denying the call (in tsocks_syscall() at
syscall.c:488)
Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=1489780924 WARNING
torsocks[11097]: [syscall] Unsupported syscall number 217. Denying the call (in
tsocks_syscall() at syscall.c:488)
UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages mat depends on:
ii gir1.2-poppler-0.18 0.48.0-2
ii python-gi 3.22.0-2
ii python-mutagen 1.36-1
ii python-pdfrw 0.2-3
pn python:any <none>
Versions of packages mat recommends:
ii gir1.2-gdkpixbuf-2.0 2.36.5-2
ii gir1.2-glib-2.0 1.50.0-1+b1
ii gir1.2-gtk-3.0 3.22.8-1
ii gir1.2-nautilus-3.0 3.22.2-1
ii libimage-exiftool-perl 10.40-1
ii python-gi-cairo 3.22.0-2
ii python-nautilus 1.1-4
mat suggests no packages.
-- debconf information:
1489780765 WARNING torsocks[11028]: [syscall] Unsupported syscall number 217.
Denying the call (in tsocks_syscall() at syscall.c:488)
--- End Message ---
--- Begin Message ---
Source: mat
Source-Version: 0.6.1-4
We believe that the bug you reported is fixed in the latest version of
mat, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
intrigeri <[email protected]> (supplier of updated mat package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 18 Mar 2017 11:28:06 +0000
Source: mat
Binary: mat
Architecture: source
Version: 0.6.1-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Privacy Tools Maintainers
<[email protected]>
Changed-By: intrigeri <[email protected]>
Closes: 858058
Description:
mat - Metadata anonymisation toolkit
Changes:
mat (0.6.1-4) unstable; urgency=medium
.
* New patch (Make-the-Nautilus-extension-work-again.patch) cherry-picked
from upstream: fix the Nautilus extension silently failing
(Closes: #858058).
* New patch (Revert-Improves-a-bit-portability.patch), cherry-picked
from upstream: fix the --backup option. This option is not only available
in all interfaces (CLI, GUI), but it's forcibly enabled in the Nautilus
extension, so it has to work for the Nautilus extension to work.
Thus, this additional change is needed to fully fix #858058.
Checksums-Sha1:
c8cae6de00cd9ecdd27656770950ae0a8a2a8ba1 2109 mat_0.6.1-4.dsc
bd8c10b715323dd1cb4a921bb28aa59a22f3dc6b 14656 mat_0.6.1-4.debian.tar.xz
Checksums-Sha256:
3f2b3d20ace3fe25b7cc637339120b6287e257d7bb990acb3a7636e344db6b18 2109
mat_0.6.1-4.dsc
1a7141fe3595d11fc2cc861f80020dbdf10bbdc296b3c9b0f4ae9902eda76876 14656
mat_0.6.1-4.debian.tar.xz
Files:
3589f9dd240f6eaf4c3b553790589223 2109 python optional mat_0.6.1-4.dsc
6b3bdcdb588629983ade44505c3d78fd 14656 python optional
mat_0.6.1-4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=yAjs
-----END PGP SIGNATURE-----
--- End Message ---
