Package: shotwell
Version: 0.30.1-1
Severity: critical
Tags: patch
Justification: breaks unrelated software

Dear Maintainer,

In a Wayland session (gnome-shell in my case), double-clicking on an image when
using the Shotwell Viewer fullscreens the image, but then fails to close the
picture.

This picture will remain on-screen even after logging out. I need to reboot the
system to get rid of it.

I consider this a critical bug, as it renders the system unusable, and can
somewhat lead to data loss. It so happened that I manages to properly close and
save my work using purely the keyboard, but without being able to see what's on
the screen. This is due to an image being stuck on my screen, hiding everything
else.

In a way, this could also be a (local) security bug, considering that the user 
can't
make the image on screen disappear, even after logging out. This information may
be leaked to any other user of the same system.

This is a known bug, which was fixed upstream on version 0.32. Due to the Debian
freeze policy, this fix never made it into Buster.

Upstream fix: 
https://gitlab.gnome.org/GNOME/shotwell/commit/6031f8a285c1599fa692905eaa0475faced08415

Best,
Fran

-- Package-specific info:

-- System Information:
Debian Release: 10.0
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_CA.utf8, LC_CTYPE=en_CA.utf8 (charmap=UTF-8), 
LANGUAGE=en_CA.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages shotwell depends on:
ii  dbus-x11 [dbus-session-bus]     1.12.14-1
ii  dconf-cli                       0.30.1-2
ii  libc6                           2.28-10
ii  libcairo2                       1.16.0-4
ii  libexif12                       0.6.21-5.1
ii  libgcr-base-3-1                 3.28.1-1
ii  libgcr-ui-3-1                   3.28.1-1
ii  libgdata22                      0.17.9-3
ii  libgdk-pixbuf2.0-0              2.38.1+dfsg-1
ii  libgee-0.8-2                    0.20.1-2
ii  libgexiv2-2                     0.10.9-1
ii  libglib2.0-0                    2.58.3-2
ii  libgphoto2-6                    2.5.22-3
ii  libgphoto2-port12               2.5.22-3
ii  libgstreamer-plugins-base1.0-0  1.14.4-2
ii  libgstreamer1.0-0               1.14.4-1
ii  libgtk-3-0                      3.24.5-1
ii  libgudev-1.0-0                  232-2
ii  libjson-glib-1.0-0              1.4.4-2
ii  libpango-1.0-0                  1.42.4-6
ii  libpangocairo-1.0-0             1.42.4-6
ii  libraw19                        0.19.2-2
ii  librsvg2-common                 2.44.10-2.1
ii  libsoup2.4-1                    2.64.2-2
ii  libsqlite3-0                    3.27.2-2
ii  libwebkit2gtk-4.0-37            2.24.2-1
ii  libxml2                         2.9.4+dfsg1-7+b3
ii  shotwell-common                 0.30.1-1

shotwell recommends no packages.

shotwell suggests no packages.

-- no debconf information

Reply via email to