Your message dated Sun, 19 Aug 2018 06:52:50 +0200
with message-id
<caknhny-ujmdz7deehaakhwpxdt3b3parx2axespbklnzohs...@mail.gmail.com>
and subject line Re: Bug#906566: appstream: I would like that appstream is
removed from the "dependency" of gnome.
has caused the Debian Bug report #906566,
regarding appstream: I would like that appstream is removed from the
"dependency" of gnome.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
906566: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906566
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: appstream
Version: 0.12.2-1
Severity: normal
Dear Maintainer,
I think it is a very bad idea to set this package to the dependency of gnome.
Reason: you can bypass software from dubious sources to apt. I think this is
not the
intention of DEBIAN. State of package should be set to "suggested" - maximum.
Using this
package you open security holes on your system.
Best regards
Andreas, DF8OE
-- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.17.7-towo.1-siduction-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages appstream depends on:
ii libappstream4 0.12.2-1
ii libc6 2.27-5
ii libglib2.0-0 2.56.1-2
appstream recommends no packages.
Versions of packages appstream suggests:
ii apt-config-icons 0.12.2-1
ii curl 7.61.0-1
-- no debconf information
-- debsums errors found:
debsums: missing file /usr/bin/appstreamcli (from appstream package)
--- End Message ---
--- Begin Message ---
2018-08-18 15:56 GMT+02:00 DF8OE <[email protected]>:
> Package: appstream
> Version: 0.12.2-1
> Severity: normal
>
> Dear Maintainer,
>
> I think it is a very bad idea to set this package to the dependency of gnome.
Please inform yourself about what the purpose of certain system
components is before making requests like this.
AppStream is required for GNOME Software and system firmware updates to work.
> Reason: you can bypass software from dubious sources to apt.
That is not what happens - all data handled comes directly from
Debian, no other sources are involved, especially not "dubious" ones,
unless the user has added them on their own.
> I think this is not the
> intention of DEBIAN. State of package should be set to "suggested" - maximum.
> Using this
> package you open security holes on your system.
> [...]
There are no known security vulnerabilities in appstream. Dependencies
are required to make the OS work correctly.
If you don't want AppStream, remove gnome-software, fwupd, isenkram, etc.
Closing.
Regards,
Matthias
--
I welcome VSRE emails. See http://vsre.info/
--- End Message ---
