Your message dated Wed, 31 May 2017 23:03:45 +0000
with message-id <[email protected]>
and subject line Bug#836055: fixed in webkit2gtk 2.16.3-2
has caused the Debian Bug report #836055,
regarding webkit2gtk: please use dbus-run-session, GTestDBus, or dbus-daemon
directly in tests
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
836055: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836055
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: webkit2gtk
Version: 2.12.4-1
Severity: minor
Tags: upstream
User: [email protected]
Usertags: dbus-launch dbus-launch-for-tests
As described in <https://lists.debian.org/debian-devel/2016/08/msg00554.html>
I'm trying to reduce how much dbus-launch is used in Debian.
This package currently uses dbus-launch in one of its unit tests.
This is really only an upstream bug - Debian doesn't currently seem to run
the tests, either at build time or from autopkgtest - but I'm filing it
downstream because it's one of around 300, so I can't go looking for
upstream bug tracking systems right now.
webkitgtk has the same bug, but I'm ignoring that one because I assume
it's dead upstream.
One way to resolve this would be to use GTestDBus, for which there is
already a FIXME comment.
This Flatpak commit illustrates how eval `dbus-launch` can be replaced
by invoking dbus-daemon directly, avoiding the X11-specific dbus-launch:
<https://github.com/flatpak/flatpak/commit/6cc8062cfb3f9410d54a27e7ccca77c103e441e8>.
The same thing in C/C++ can be seen in
<https://cgit.freedesktop.org/dbus/dbus/tree/test/test-utils-glib.c>
(search for --print-address). This is essentially what GTestDBus does.
Alternatively, the test executable could be run through
dbus-run-session(1), which is available since dbus 1.8, the upstream
"old stable" branch available in Debian stable. That would look something
like this:
dbus-run-session -- make check
Thanks,
S
--- End Message ---
--- Begin Message ---
Source: webkit2gtk
Source-Version: 2.16.3-2
We believe that the bug you reported is fixed in the latest version of
webkit2gtk, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alberto Garcia <[email protected]> (supplier of updated webkit2gtk package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 01 Jun 2017 00:29:57 +0300
Source: webkit2gtk
Binary: libjavascriptcoregtk-4.0-18 libjavascriptcoregtk-4.0-dev
libjavascriptcoregtk-4.0-bin gir1.2-javascriptcoregtk-4.0 libwebkit2gtk-4.0-37
libwebkit2gtk-4.0-dev libwebkit2gtk-4.0-doc gir1.2-webkit2-4.0
libwebkit2gtk-4.0-37-gtk2
Architecture: source
Version: 2.16.3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian WebKit Maintainers
<[email protected]>
Changed-By: Alberto Garcia <[email protected]>
Description:
gir1.2-javascriptcoregtk-4.0 - JavaScript engine library from WebKitGTK+ -
GObject introspection
gir1.2-webkit2-4.0 - Web content engine library for GTK+ - GObject
introspection data
libjavascriptcoregtk-4.0-18 - JavaScript engine library from WebKitGTK+
libjavascriptcoregtk-4.0-bin - JavaScript engine library from WebKitGTK+ -
command-line interpre
libjavascriptcoregtk-4.0-dev - JavaScript engine library from WebKitGTK+ -
development files
libwebkit2gtk-4.0-37 - Web content engine library for GTK+
libwebkit2gtk-4.0-37-gtk2 - Web content engine library for GTK+ - GTK+2 plugin
process
libwebkit2gtk-4.0-dev - Web content engine library for GTK+ - development files
libwebkit2gtk-4.0-doc - Web content engine library for GTK+ - documentation
Closes: 836055
Changes:
webkit2gtk (2.16.3-2) unstable; urgency=medium
.
* Upload to unstable (Closes: #836055).
* debian/watch:
+ Stop scanning the 2.15 branch.
* debian/gbp.conf:
+ Update upstream branch name.
* The WebKitGTK+ security advisory WSA-2017-0004 lists the following
security fixes in the latest versions of WebKitGTK+:
+ CVE-2017-2505, CVE-2017-2508, CVE-2017-2514, CVE-2017-2521
(fixed in 2.16.0).
+ CVE-2017-2504, CVE-2017-2506, CVE-2017-2515, CVE-2017-2525,
CVE-2017-2526, CVE-2017-2528, CVE-2017-2530, CVE-2017-2531,
CVE-2017-2536, CVE-2017-2544, CVE-2017-2547, CVE-2017-2549,
CVE-2017-6980, CVE-2017-6984 (fixed in 2.16.1).
+ CVE-2017-2496, CVE-2017-2510, CVE-2017-2539 (fixed in 2.16.3).
Checksums-Sha1:
1fc9a4fac7905c4b905ba0705a0b90a903a64283 3574 webkit2gtk_2.16.3-2.dsc
fa98cf2488926502474ea4f3226bfc2581ad4e42 52384
webkit2gtk_2.16.3-2.debian.tar.xz
c55c343ecd832d6417efd5a4798a6122171fe42f 16064
webkit2gtk_2.16.3-2_source.buildinfo
Checksums-Sha256:
58596d44b43cb35e65c99d1eed294ff899095c9300814498df88294fbb00d528 3574
webkit2gtk_2.16.3-2.dsc
b4f8954de48039bb1e20eb7e7455286855347c80582be29d9f795a8a942ec155 52384
webkit2gtk_2.16.3-2.debian.tar.xz
e79f10b7a646d98671a034a4a10d658f06a8a87be4848523004304dca27cf236 16064
webkit2gtk_2.16.3-2_source.buildinfo
Files:
b79b8c94cd5f6ccebeb789ae700c1e70 3574 web optional webkit2gtk_2.16.3-2.dsc
3c45c96b107f92ef2fd65c29118e6c0b 52384 web optional
webkit2gtk_2.16.3-2.debian.tar.xz
1acd35e1864b0ac0124941a2d8350b40 16064 web optional
webkit2gtk_2.16.3-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ljBD
-----END PGP SIGNATURE-----
--- End Message ---
