Your message dated Sat, 11 Aug 2018 12:04:56 +0000
with message-id <e1fosdc-000j95...@fasolo.debian.org>
and subject line Bug#900936: fixed in geoclue-2.0 2.4.11-1
has caused the Debian Bug report #900936,
regarding geoclue: Update to 2.4.10 breaks redshift
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
900936: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900936
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: geoclue-2.0
Version: 2.4.10-1
Severity: critical
File: geoclue
Tags: upstream

Dear Maintainer,

The update to 2.4.10-1 causes redshift to immediately crash, with the error:

Failed to connect to GeoClue2 service: 
GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: 'redshift' disallowed, no 
agent for UID 1000

Starting the agent in the demo package manually appears to make no difference.
Additionally, I tried to use the where-am-i demo, which produced the same error
(again with the agent started).

I think the cause is this change referred to in the upstream changelog:
"Refuse location access if no app-auth agent is registered. This fixes a
security hole where an app requests location access before the agent gets to
register itself and we end up giving out locaiton access even though user has
disabled it."

Can the change be reverted until the agent works?

FYI, I make the report critical so that the change doesn't migrate to testing,
feel free to drop the severity if you think that's appropriate.


-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
'unstable'), (500, 'testing'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.16.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_AU.UTF-8), LANGUAGE=en_AU:en (charmap=UTF-8) (ignored: LC_ALL set to 
en_AU.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages geoclue-2.0 depends on:
ii  adduser             3.117
ii  libavahi-client3    0.7-4
ii  libavahi-common3    0.7-4
ii  libavahi-glib1      0.7-4
ii  libc6               2.27-3
ii  libglib2.0-0        2.56.1-2
ii  libjson-glib-1.0-0  1.4.2-4
ii  libmm-glib0         1.7.990-1
ii  libsoup2.4-1        2.62.2-1

Versions of packages geoclue-2.0 recommends:
ii  avahi-daemon      0.7-4
ii  iio-sensor-proxy  2.4-2
ii  modemmanager      1.7.990-1
ii  wpasupplicant     2:2.6-16

geoclue-2.0 suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: geoclue-2.0
Source-Version: 2.4.11-1

We believe that the bug you reported is fixed in the latest version of
geoclue-2.0, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 900...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laurent Bigonville <bi...@debian.org> (supplier of updated geoclue-2.0 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 11 Aug 2018 13:26:52 +0200
Source: geoclue-2.0
Binary: geoclue-2.0 geoclue-2-demo libgeoclue-2-0 libgeoclue-2-dev 
gir1.2-geoclue-2.0
Architecture: source amd64
Version: 2.4.11-1
Distribution: unstable
Urgency: medium
Maintainer: Laurent Bigonville <bi...@debian.org>
Changed-By: Laurent Bigonville <bi...@debian.org>
Description:
 geoclue-2-demo - geoinformation service (demonstration programs)
 geoclue-2.0 - geoinformation service
 gir1.2-geoclue-2.0 - convenience library to interact with geoinformation 
service (intr
 libgeoclue-2-0 - convenience library to interact with geoinformation service
 libgeoclue-2-dev - convenience library to interact with geoinformation service 
(deve
Closes: 900936
Changes:
 geoclue-2.0 (2.4.11-1) unstable; urgency=medium
 .
   * [7ccde738] Bump debhelper compatibility to 11
   * [30d692b7] debian/control: Update Homepage field
   * [80038652] New upstream version 2.4.11
     - Fix the demo agent, so it's functional for DE not implementing one
       (Closes: #900936)
   * [aca24ff5] debian/control: Bump libglib2.0-dev build-dep to 2.44.0
   * [13ace8c7] debian/control: Bump Standards-Version to 4.2.0 (no further
     changes)
Checksums-Sha1:
 5459c0857bbd30f62ab32d20d4c4b81f62273341 2198 geoclue-2.0_2.4.11-1.dsc
 ef941c480da28de8b1de99ce8134c4d738a6a554 372884 geoclue-2.0_2.4.11.orig.tar.xz
 6ee48a7356966c311d3aae952418d349df336724 9976 
geoclue-2.0_2.4.11-1.debian.tar.xz
 f73ccb80821c3e1df2a3a56e0ca9b2ac13b68da9 53376 
geoclue-2-demo-dbgsym_2.4.11-1_amd64.deb
 a666b052edd0ea5d0726b92ac1d719b7177083cc 23688 
geoclue-2-demo_2.4.11-1_amd64.deb
 d52df6ed4b78955e1fc4eb71f288570ddb3a379d 373620 
geoclue-2.0-dbgsym_2.4.11-1_amd64.deb
 080296bde5dc26da31875a1700ad5d7959eea057 12501 
geoclue-2.0_2.4.11-1_amd64.buildinfo
 ba755f20c723f817454efb42d0c86b6382c29ac8 87832 geoclue-2.0_2.4.11-1_amd64.deb
 b43c061f33946c83eef6d507cad913bc55913692 11636 
gir1.2-geoclue-2.0_2.4.11-1_amd64.deb
 8250848cd1aeb5589af93a0c5448c70750b48726 90692 
libgeoclue-2-0-dbgsym_2.4.11-1_amd64.deb
 3b2106241b9a42d70b1e9de5f183a74d92ee190e 30504 
libgeoclue-2-0_2.4.11-1_amd64.deb
 d27e663771a0f6f79a24304c0dd6f305ecb864c3 20340 
libgeoclue-2-dev_2.4.11-1_amd64.deb
Checksums-Sha256:
 9ea786c964905563e8c463325e6c9ad9cd1e11331cefa063547654a19c0f3d18 2198 
geoclue-2.0_2.4.11-1.dsc
 01397ff7e4acaf0503eacd51aae3d70df0ddc7553bb822f172e4f1409713f31d 372884 
geoclue-2.0_2.4.11.orig.tar.xz
 437ee0af57350c1b510f769c50d7dce44c1cf554ffc0fb987a7347dda002b084 9976 
geoclue-2.0_2.4.11-1.debian.tar.xz
 649b473ae4050720da23b5e2848dde8788e2c3bd2cac21543f6c175949fa5563 53376 
geoclue-2-demo-dbgsym_2.4.11-1_amd64.deb
 ec8f6144eca9dce4fb0835bd11064d3861e7e2fa7ce41a21bdb87eadc853a3a4 23688 
geoclue-2-demo_2.4.11-1_amd64.deb
 42043ca10c96a0e1b01e1916593fccf9b387bd9656e667da116e34910e91b406 373620 
geoclue-2.0-dbgsym_2.4.11-1_amd64.deb
 5a43e1cc31f5da93ae0592c1dcbd9057ce94ee71ce89ecadf9a33d9b0485bda3 12501 
geoclue-2.0_2.4.11-1_amd64.buildinfo
 9be472b51d1fad2fd00e2f80edc2c79aa2b0a0e6cf061460d5ebbf140944728c 87832 
geoclue-2.0_2.4.11-1_amd64.deb
 865aa485b25def4d3f6a30a12ff455afe072a7408d612ed76abb4b00455a80a7 11636 
gir1.2-geoclue-2.0_2.4.11-1_amd64.deb
 da89e83dd9d2b3ea31b5587af918470ad182e378a0686976fe196d241df7947c 90692 
libgeoclue-2-0-dbgsym_2.4.11-1_amd64.deb
 2393a6a1e7d9337aeb7ecf0512b5a61b6295933b658fbb2e2dab4ade2a39899a 30504 
libgeoclue-2-0_2.4.11-1_amd64.deb
 f0e98549ba8e9a5f1c4744cf6a92d4d4bc14d1a5a502cfb9a2994f97ff97b588 20340 
libgeoclue-2-dev_2.4.11-1_amd64.deb
Files:
 d67138335c18ddf5306565847e9d377e 2198 utils optional geoclue-2.0_2.4.11-1.dsc
 8bc64e7b9a18c7bf12c48b1c4323cf14 372884 utils optional 
geoclue-2.0_2.4.11.orig.tar.xz
 3aec8282b9b7c1b1fd23a89f6426a367 9976 utils optional 
geoclue-2.0_2.4.11-1.debian.tar.xz
 7a11c427e9abad094d437a24fd81733b 53376 debug optional 
geoclue-2-demo-dbgsym_2.4.11-1_amd64.deb
 e0f25ce0caf7af3988bc666c318d2ab9 23688 utils optional 
geoclue-2-demo_2.4.11-1_amd64.deb
 b7ca48cecb41e1673e28e9945b5e4794 373620 debug optional 
geoclue-2.0-dbgsym_2.4.11-1_amd64.deb
 22043a9617bcfbb164334dc5ee5e7b69 12501 utils optional 
geoclue-2.0_2.4.11-1_amd64.buildinfo
 d19c10abcb41407ef056ebb6c46bceee 87832 utils optional 
geoclue-2.0_2.4.11-1_amd64.deb
 ed7e6d27401d0d990bef79c81d8d0fad 11636 introspection optional 
gir1.2-geoclue-2.0_2.4.11-1_amd64.deb
 639cce986b272f2f3293efb287961a25 90692 debug optional 
libgeoclue-2-0-dbgsym_2.4.11-1_amd64.deb
 52e7bd5c705d51bb90078315751badbb 30504 libs optional 
libgeoclue-2-0_2.4.11-1_amd64.deb
 990548688130341c2c24afcb47cb8e74 20340 libdevel optional 
libgeoclue-2-dev_2.4.11-1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQFFBAEBCAAvFiEEmRrdqQAhuF2x31DwH8WJHrqwQ9UFAltuygERHGJpZ29uQGRl
Ymlhbi5vcmcACgkQH8WJHrqwQ9U29Qf+PjWBkV2hgOo8a1z8lgAFGW5ArWx7dd3t
BZlrZhiw43AMuuPvi6ZnMhzmzD6FZqmVaI5jUJfmhNqeBvDyo3nbAeopsqjvbUkH
LxQPErLLd+EMXzVLM0K2MizvCtKVzkTqp6U/nz5MEpFwS1KB2N7x+GZ6xQ4nrGMO
gnRBrnVmxUFnsraFpX5Ik9BNWO1N9uqho5gVNukdZhqOtVTRc0iiXch2UFXPuP1R
GSDSmfxGg7PwCe8I24aDU/WZjsriDzOBi/ZIcA/mthUG0BhE4q+iX7axyl9Jd/lX
V0jAoPP4XRNQ9Ksm0wdlLEy+4faYh20JD6VyFBdB78bYBtso+CxSMw==
=PP/z
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to