Reply To: Repository question and eudev/libeudev/openrc

Forum › Forums › New users › New Users and General Questions › Repository question and eudev/libeudev/openrc › Reply To: Repository question and eudev/libeudev/openrc

February 15, 2018 at 5:19 pm #6621
Anonymous

    antiX will need to host gksu from own repository.

    followup:

    Behold the the Debian GNOME team “embrace, extend, extinguish” strategy at work.

    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887878
    21 Jan, 2018

    For the next major stable release of Debian (codenamed Buster), the Debian GNOME team plans to default to GNOME on Wayland where gksu does not even work.
    gksu is unmaintained (last upload 2014) and is a security vulnerability.

    Therefore, gksu has been removed from Debian Testing and will be removed from Unstable soon.

    In earnest, I searched bug reports, but cannot find the reputed “security vulnerability”.
    Sarcastically: the marked-as-Important bug “gksu: locking mouse/keyboard not enough to protect against keylogging” should be marked-as “Well, Duh!”

    Related reading (sez me):
    reddit topic (currently 52 comments): “Deb packages are not getting upstream to Debian”
    and
    Distribution packages considered insecure | Hacker News {——– statuscode.ch blogpost: “Distribution packages considered insecure”