Bug#939119: gnustep-base-runtime: Upgrading to Debian 10 causes gdomap network service to become enabled

2019-09-14 Thread Yavor Doganov
Control: severity -1 important On Sun, 01 Sep 2019 14:24:05 +0300, Alan Jenkins wrote: > Package: gnustep-base-runtime > Version: 1.26.0-4 > Severity: grave > Tags: security > Justification: user security hole Many thanks for the report but like Michael Biebl I disagree with the severity. This

Bug#939119: gnustep-base-runtime: Upgrading to Debian 10 causes gdomap network service to become enabled

2019-09-01 Thread Michael Biebl
[somehow messed up the CC list, s/pkg-gnome/pkg-systemd/] Am 01.09.19 um 14:44 schrieb Alan Jenkins: > On 01/09/2019 12:52, Michael Biebl wrote: >> On 01.09.19 13:24, Alan Jenkins wrote: >>> Package: gnustep-base-runtime >>> Version: 1.26.0-4 >>> Severity: grave >>> Tags: security >>>

Bug#939119: gnustep-base-runtime: Upgrading to Debian 10 causes gdomap network service to become enabled

2019-09-01 Thread Alan Jenkins
On 01/09/2019 12:52, Michael Biebl wrote: On 01.09.19 13:24, Alan Jenkins wrote: Package: gnustep-base-runtime Version: 1.26.0-4 Severity: grave Tags: security Justification: user security hole Dear Maintainer, I had "gnustep-base-runtime" installed on my system, probably as a dependency of

Bug#939119: gnustep-base-runtime: Upgrading to Debian 10 causes gdomap network service to become enabled

2019-09-01 Thread Michael Biebl
On 01.09.19 13:52, Michael Biebl wrote: > I guess gnustep-base-runtime explicitly needs to remove the existing > /etc/rc?.d/???gdomap symlinks on upgrades in preinst (possibly guarded > by a check which reads the old /etc/default/gdomap and tests if > ENABLED=NO) so they can be properly re-created

Bug#939119: gnustep-base-runtime: Upgrading to Debian 10 causes gdomap network service to become enabled

2019-09-01 Thread Michael Biebl
On 01.09.19 13:24, Alan Jenkins wrote: > Package: gnustep-base-runtime > Version: 1.26.0-4 > Severity: grave > Tags: security > Justification: user security hole > > Dear Maintainer, > > I had "gnustep-base-runtime" installed on my system, probably as a > dependency of "unar". > > When I

Bug#939119: gnustep-base-runtime: Upgrading to Debian 10 causes gdomap network service to become enabled

2019-09-01 Thread Alan Jenkins
Package: gnustep-base-runtime Version: 1.26.0-4 Severity: grave Tags: security Justification: user security hole Dear Maintainer, I had "gnustep-base-runtime" installed on my system, probably as a dependency of "unar". When I upgrade from Debian 9 to Debian 10 (and reboot), there is a network