Your message dated Mon, 25 Sep 2023 19:47:33 +0000
with message-id <e1qkryl-0059ae...@fasolo.debian.org>
and subject line Bug#1051408: fixed in flameshot 0.9.0+ds1-2+deb11u1
has caused the Debian Bug report #1051408,
regarding flameshot: uploads potentially sensitive screenshots to the internet
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1051408: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051408
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: flameshot
Version: 0.9.0+ds1-2
Severity: critical
Tags: upstream
Justification: causes serious data loss
X-Debbugs-Cc: pe...@ostwall195.de
Dear Maintainer,
* What led up to the situation?
I have installed the package for taking screenshots on recommendation
* What exactly did you do (or not do) that was effective (or
ineffective)?
Installed the package on debian bookworm
* What was the outcome of this action?
Default configuration uploaded my screenshots to imgur, I found a Imgur-link in
my clipboard
* What outcome did you expect instead?
Default configuration should save the screenshot in a local directory
-- System Information:
Debian Release: 11.7
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable-security'), (500,
'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.10.0-25-amd64 (SMP w/4 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages flameshot depends on:
ii hicolor-icon-theme 0.17-2
ii libc6 2.31-13+deb11u6
ii libfmt7 7.1.3+ds1-5
ii libgcc-s1 10.2.1-6
ii libqt5core5a 5.15.2+dfsg-9
ii libqt5dbus5 5.15.2+dfsg-9
ii libqt5gui5 5.15.2+dfsg-9
ii libqt5network5 5.15.2+dfsg-9
ii libqt5svg5 5.15.2-3
ii libqt5widgets5 5.15.2+dfsg-9
ii libspdlog1 [libspdlog1-fmt7] 1:1.8.1+ds-2.1
ii libstdc++6 10.2.1-6
flameshot recommends no packages.
Versions of packages flameshot suggests:
ii ca-certificates 20210119
ii openssl 1.1.1n-0+deb11u5
--- End Message ---
--- Begin Message ---
Source: flameshot
Source-Version: 0.9.0+ds1-2+deb11u1
Done: Boyuan Yang <by...@debian.org>
We believe that the bug you reported is fixed in the latest version of
flameshot, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1051...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Boyuan Yang <by...@debian.org> (supplier of updated flameshot package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 21 Sep 2023 13:16:48 -0400
Source: flameshot
Architecture: source
Version: 0.9.0+ds1-2+deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Boyuan Yang <by...@debian.org>
Changed-By: Boyuan Yang <by...@debian.org>
Closes: 1051408
Changes:
flameshot (0.9.0+ds1-2+deb11u1) bullseye; urgency=medium
.
* debian/patches/0006-Disable-default-imgur-token.patch:
Disable default imgur uploading token.
.
Flameshot before v0.10.0 does not pop up confirmation before
uploading the screenshot to imgur, which is a security risk
that may leak sensitive user information.
.
This patch strips the embedded default imgur token from the
source code to disable default image uploading. Users who need
image uploading functionality may set their own imgur token
in flameshot configuration to re-enable this functionality.
(Closes: #1051408)
Checksums-Sha1:
31007af06acc21b603537ed58fe078c9af5dd8ea 1982 flameshot_0.9.0+ds1-2+deb11u1.dsc
30e56f01fac76483317d115840e2d68d565e54ab 7329718
flameshot_0.9.0+ds1.orig.tar.gz
92b77ebb90aa0889a14ad36779406752d1eb3a04 13172
flameshot_0.9.0+ds1-2+deb11u1.debian.tar.xz
5870b7c33b53a4f121b24bfbfcedd88c9ab6e375 11927
flameshot_0.9.0+ds1-2+deb11u1_amd64.buildinfo
Checksums-Sha256:
4552fb5646d50cdbfec834b4784b0e37a3ae00187e6dae62c30aeb6745a7fbc8 1982
flameshot_0.9.0+ds1-2+deb11u1.dsc
fdf17b21b49cb9f946b36aef4633399e60eec91bcb08868136e965e9ac403585 7329718
flameshot_0.9.0+ds1.orig.tar.gz
c9d2e0f55cfb34602e6f26f91117971770752d2b53afb03c634567ec011f08ba 13172
flameshot_0.9.0+ds1-2+deb11u1.debian.tar.xz
3166a5452c6b52832f8a95f4f2f5b0f0030350d67dcea65c94ddd33c54d3abae 11927
flameshot_0.9.0+ds1-2+deb11u1_amd64.buildinfo
Files:
789211bad351942b8227f4ab8c79a929 1982 graphics optional
flameshot_0.9.0+ds1-2+deb11u1.dsc
7fda7cb34741c6ba3703fe1640bbd636 7329718 graphics optional
flameshot_0.9.0+ds1.orig.tar.gz
671aa9b9491ee16dce3e66c4f2a2cbbb 13172 graphics optional
flameshot_0.9.0+ds1-2+deb11u1.debian.tar.xz
b6d682004e4bb539dc065858a3101546 11927 graphics optional
flameshot_0.9.0+ds1-2+deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=vhE8
-----END PGP SIGNATURE-----
--- End Message ---
