This bug was fixed in the package gnome-shell - 44~beta-1ubuntu1

---------------
gnome-shell (44~beta-1ubuntu1) lunar; urgency=medium

  [ Jeremy Bicha ]
  * Merge with Debian, containing new upstream release:
    - Do not deference symlinks when uninstalling an extension (LP: #1998529)
  * Remaining changes with debian:
    - Add some Recommends:
      + ubuntu-session (| gnome-session) to have the ubuntu session available
      + ubuntu-wallpapers
      + xserver-xorg-legacy
      + yaru-theme-gnome-shell for the default ubuntu theming
    - Move some Recommends to Suggests:
      + chrome-gnome-shell
      + gnome-backgrounds
    - Update debian/gbp.conf with Ubuntu settings
    - debian/ubuntu-session-mods/ubuntu.json: Use Yaru's gnome-shell icons
    - debian/patches: Do not hang & crash if fingerprint service fails to start
      (LP: #1962566)
    - ubuntu/desktop_detect.patch:
      + add caching for desktop detection to avoid querying the current
        desktop env variable as iterate through the list each time. For the
        time of the Shell process, we can expect this env variable to stay
        stable.
    - ubuntu/lightdm-user-switching.patch:
      + Allow user switching when using LightDM.
    - ubuntu/lock_on_suspend.patch
      + Respect Ubuntu's lock-on-suspend setting.
    - ubuntu/background_login.patch
      + Change default background color as we modified the default GDM color
        for our ubuntu session.
    - ubuntu/gdm_alternatives.patch
      + Add support for GDM3 theme alternatives
    - main-show-an-error-message-on-gnome-shell-crash.patch,
      global-make-possible-to-set-debug-flags-dynamically.patch,
      main-increase-the-granularity-of-backtraces-in-SHELL_DEBU.patch,
      main-add-backtrace-crashes-all-and-backtrace-all.patch,
      sessionMode-add-support-for-debugFlags-parameter.patch:
      + Improve debug JS tracing for crash reports
    - ubuntu/smarter_alt_tab.patch:
      + quick alt-tab (without showing up the switcher) switch only between
        the last window of the last 2 applications to be focused instead of
        raising all windows of those apps.
    - magnifier-Show-cursor-when-magnifier-is-enabled-and-scale.patch:
      + Show monitor scaled cursor when magnifier is enabled
    - ubuntu/search-call-XUbuntuCancel-method-on-providers-when-no-dat.patch:
      + stop searches when requested from UI
    - magnifier-Show-cursor-when-magnifier-is-enabled-and-scale.patch
    - u/search-call-XUbuntuCancel-method-on-providers-when-no-dat.patch
    - ubuntu/resolve_alternate_theme_path.patch
    - ubuntu/secure_mode_extension.patch
    - ubuntu/keep-ubuntu-logo-bright-lp1867133-v1.patch
    - ubuntu/configure_login_screen.patch
    - ubuntu/layout-Make-starting-in-the-overview-optional.patch:
      + Makes dock replace overview easier
    - ubuntu/layout-Try-to-allocate-before-getting-size-of-tracke.patch:
      + Ensure windows don't get maximized under the panels / dock
    - debian/patches: Compute system background color from theme (LP: #1965727)
    - ubuntu/configure-login-screen.patch: Use bg color for initial system bg
      (LP: #1965727)
    - debian/patches: Ensure St.Entry's `selected-color` CSS property is
      honored (LP: #1878998)
    - ubuntu/support-loading-Yaru-variants: Handle dark/light variants better
    - d/p/use-favorites-strings: Only apply this to ubuntu session
    - debian/patches: Support configuring icons resource to use for mode
    - Revert-st-Apply-css-foreground-color-to-text-as-a-PangoAt.patch:
      + Ensure selected-text foreground color is preserved
    - ubuntu/sessionMode-Add-support-for-configuring-an-icons-resource.patch:
      + Support loading iconsResourceName from session file
    - ubuntu/main-Support-loading-multiple-Yaru-theme-variants.patch,
    - ubuntu/darkMode-Add-support-to-Yaru-theme-color-variants.patch:
      + Support loading Yaru theme variants (for accent color)
    - ubuntu/Revert-dash-Use-pin-instead-of-favorites
    * Rebase patches
    * Drop main-Avoid-meta-finalize.patch: maybe not needed any more
    * Fix typo in patch

  [ Marco Trevisan (Treviño) ]
  * debian/patches: Ensure GSETTINGS_SCHEMA_DIR is honored in tests
  * debian/patches/ubuntu: Fix description typos to mute lintian

gnome-shell (44~beta-1) experimental; urgency=medium

  * New upstream release
  * Drop translation patches: applied in new release
  * Bump mutter dependency to 44~beta
  * Update install files
  * Build-Depend on mutter-12-tests instead of libmutter-test-12
  * Build-Depend on gir1.2-nma-1.0 for build tests
  * Temporarily disable change to make test warnings fail the build

gnome-shell (43.3-1) unstable; urgency=medium

  * Team upload
  * New upstream release
    - Don't dereference symlinks when deleting extensions
      (GNOME/gnome-shell#6182, which can be a data loss bug)
    - Fix windows disappearing from Alt+Tab if their title changes at
      just the wrong time (GNOME/gnome-shell#6385)
    - Log warnings on invalid state transitions (GNOME/gnome-shell#4561)
    - Fix some memory leaks in gdm (GNOME/gnome-shell#6395)
    - gnome-extensions tool: Fix the ability to enable and disable
      extensions while GNOME is installed but not running
      (GNOME/gnome-shell#6127)
    - Silence compiler warnings with newer GLib (GNOME/gnome-shell!2625)
    - Add precondition checks to prevent some crashes
      (GNOME/gnome-shell!2622)
    - Provide context to IBus input method when the surrounding text
      becomes empty (GNOME/gnome-shell#5895)
    - Avoid warnings with audio streams on a device not corresponding
      to a sound card, such as network sinks (GNOME/gnome-shell!2616)
    - Avoid some strings being untranslatable by working around an xgettext
      bug (GNOME/gnome-shell#5280)
    - Fix drag-and-drop in the dash when animations are disabled
      (GNOME/gnome-shell!2604)
    - Avoid warnings when dragging an app from the dash to the grid
      (GNOME/gnome-shell#6317)
    - Save screencasts to home directory if the Videos directory has been
      deleted, instead of failing to record (GNOME/gnome-shell!2594)
    - Make Shell less susceptible to the OOM-killer, since it is required
      for basic functionality of desktops that use it
      (GNOME/gnome-shell!2582)
  * d/patches: Drop patches that were applied upstream
  * d/patches: Add translation updates from upstream:
    fi, id, ka, pt, sv, tr, uk
  * d/control.in, d/gbp.conf, d/watch: Set up branches for 43.x in bookworm.
    This leaves the default branch available for GNOME 44 betas in
    experimental and Ubuntu.

gnome-shell (43.2-2) unstable; urgency=medium

  * Team upload
  * d/patches: Sort closest-to-upstream first
  * d/patches: Update to upstream gnome-43 branch commit 43.2-8-ga1b834297
    - Ensure that buttons in quick settings menu are aligned to pixel grid
    - Translation updates: ab, en_GB, ie, ka, ru
  * Update standards version to 4.6.2 (no changes needed)

 -- Marco Trevisan (Treviño) <[email protected]>  Fri, 24 Feb 2023
06:29:15 +0100

** Changed in: gnome-shell (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1998529

Title:
  Uninstalling extensions dereferences symlinks, risking data loss

Status in GNOME Shell:
  Fix Released
Status in gnome-shell package in Ubuntu:
  Fix Released

Bug description:
  Uninstalling a gnome-shell extension removes its folder in
  ".local/share/gnome-shell/extensions", recursively as it should, but
  dereferencing symlinks!!  Here is what happens and how to reproduce:

  Someone (me) installs an extension to try it out.  While tweaking with
  its configuration, to try to customize it, I put a symlink within its
  extensions directory, pointing to somewhere else in my home folder.
  For example, in my case, a symlink to "~/Pictures/Icons", to be able
  to set it up with one of many custom icons I've created.  Uninstall
  the extension later as it's not to my liking, extensions folder is
  gone, as well as my ~/Pictures/Icons folder's contents in my home
  directory.  This could have been a lot worse, if the symlink was
  pointing higher up, since its doing a recursive delete.

  In this case, extension was installed as well as removed from the
  gnome-extensions website.  Usually I install from website, but
  uninstall from extensions manager.  Do not know if it happens with
  extensions manager as well.

  Please fix this, because I was frankly shocked that this happened, and
  could lead to very bad things (I've never seen a rm -rf follow
  symlinks, and wouldn't even want to know what flag would do that and
  why you would want that).

  What would expect to happen:  A simple rm -rf recursive, non-
  dereferencing removal of extensions directory.

  What happened instead:  A recursive removal, dereferencing symlinks,
  which can lead anywhere, and be very dangerous.  Symlinks may have
  been placed in there if someone was working on or tweaking an
  extension.

  
  Description:     Ubuntu 22.04.1 LTS
  Release:         22.04
  gnome-shell        42.5
  chrome-gnome-shell 10.1

To manage notifications about this bug go to:
https://bugs.launchpad.net/gnome-shell/+bug/1998529/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to