From unknown Mon Jun 23 13:09:09 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#27909 <27909@debbugs.gnu.org> To: bug#27909 <27909@debbugs.gnu.org> Subject: Status: Replace keepassx with keepassxc Reply-To: bug#27909 <27909@debbugs.gnu.org> Date: Mon, 23 Jun 2025 20:09:09 +0000 retitle 27909 Replace keepassx with keepassxc reassign 27909 guix-patches submitter 27909 Efraim Flashner severity 27909 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 01 11:08:45 2017 Received: (at submit) by debbugs.gnu.org; 1 Aug 2017 15:08:45 +0000 Received: from localhost ([127.0.0.1]:37075 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcYmk-0007y8-Fi for submit@debbugs.gnu.org; Tue, 01 Aug 2017 11:08:44 -0400 Received: from eggs.gnu.org ([208.118.235.92]:45910) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcYmf-0007xs-Fj for submit@debbugs.gnu.org; Tue, 01 Aug 2017 11:08:37 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dcYmY-0003KH-Un for submit@debbugs.gnu.org; Tue, 01 Aug 2017 11:08:28 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50 autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:55037) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dcYmY-0003KD-Ru for submit@debbugs.gnu.org; Tue, 01 Aug 2017 11:08:26 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:36866) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dcYmX-0007gp-EO for guix-patches@gnu.org; Tue, 01 Aug 2017 11:08:26 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dcYmS-0003EO-6s for guix-patches@gnu.org; Tue, 01 Aug 2017 11:08:25 -0400 Received: from flashner.co.il ([178.62.234.194]:43689) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dcYmR-0003E0-T1 for guix-patches@gnu.org; Tue, 01 Aug 2017 11:08:20 -0400 Received: from localhost (46-117-130-79.bb.netvision.net.il [46.117.130.79]) by flashner.co.il (Postfix) with ESMTPSA id 052A040375 for ; Tue, 1 Aug 2017 15:08:18 +0000 (UTC) Date: Tue, 1 Aug 2017 18:08:16 +0300 From: Efraim Flashner To: guix-patches@gnu.org Subject: Replace keepassx with keepassxc Message-ID: <20170801150815.GJ2406@macbook42.flashner.co.il> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="UeXZ3FjlYZvuln/G" Content-Disposition: inline User-Agent: Mutt/1.8.3 (2017-05-23) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) --UeXZ3FjlYZvuln/G Content-Type: multipart/mixed; boundary="lR6P3/j+HGelbRkf" Content-Disposition: inline --lR6P3/j+HGelbRkf Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable The original keepassx hasn't seen much activity in quite a while, no bugs fixed or features added. Keepassxc is the community fork of keepassx. --=20 Efraim Flashner =D7=90=D7=A4=D7=A8=D7=99=D7=9D = =D7=A4=D7=9C=D7=A9=D7=A0=D7=A8 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --lR6P3/j+HGelbRkf Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment; filename="0001-gnu-Add-keepassxc.patch" Content-Transfer-Encoding: quoted-printable =46rom e933a81a46dcdd48a34ba767145d490ffd892ef1 Mon Sep 17 00:00:00 2001 =46rom: Efraim Flashner Date: Tue, 1 Aug 2017 18:02:40 +0300 Subject: [PATCH 1/2] gnu: Add keepassxc. * gnu/packages/password-utils.scm (keepassxc): New variable. --- gnu/packages/password-utils.scm | 35 ++++++++++++++++++++++++++++++++++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/gnu/packages/password-utils.scm b/gnu/packages/password-utils.= scm index 08591d108..cdd705956 100644 --- a/gnu/packages/password-utils.scm +++ b/gnu/packages/password-utils.scm @@ -1,6 +1,6 @@ ;;; GNU Guix --- Functional package management for GNU ;;; Copyright =C2=A9 2015 Steve Sprang -;;; Copyright =C2=A9 2015, 2016 Efraim Flashner +;;; Copyright =C2=A9 2015, 2016, 2017 Efraim Flashner ;;; Copyright =C2=A9 2015 Aljosha Papsch ;;; Copyright =C2=A9 2016 Christopher Allan Webber ;;; Copyright =C2=A9 2016 Jessica Tallon @@ -75,6 +75,39 @@ human.") (license license:gpl2))) =20 +(define-public keepassxc + (package + (name "keepassxc") + (version "2.2.0") + (source + (origin + (method url-fetch) + (uri (string-append "https://github.com/keepassxreboot/" name + "/releases/download/" version "/keepassxc-" + version "-src.tar.xz")) + (sha256 + (base32 + "0nby6aq6w8g7c9slzahf7i34sbj8majf8rhmqqww87v6kaypxi3i")))) + (build-system cmake-build-system) + (inputs + `(("libgcrypt" ,libgcrypt) + ("libxi" ,libxi) + ("libxtst" ,libxtst) + ("qtbase" ,qtbase) + ("qtx11extras" ,qtx11extras) + ("zlib" ,zlib))) + (native-inputs + `(("qttools" ,qttools))) + (home-page "https://www.keepassxc.org") + (synopsis "Password manager") + (description "KeePassXC is a password manager or safe which helps you = to +manage your passwords in a secure way. You can put all your passwords in = one +database, which is locked with one master key or a key-file which can be s= tored +on an external storage device. The databases are encrypted using the +algorithms AES or Twofish.") + ;; Non functional parts use various licences. + (license license:gpl3))) + (define-public keepassx (package (name "keepassx") --=20 2.13.3 --lR6P3/j+HGelbRkf Content-Type: text/plain; charset=utf-8 Content-Disposition: attachment; filename="0002-gnu-keepassx-Superseded-by-keepassxc.patch" Content-Transfer-Encoding: quoted-printable =46rom c4968c3f9cbf0f82c80a5b20203b7d763dd3e429 Mon Sep 17 00:00:00 2001 =46rom: Efraim Flashner Date: Tue, 1 Aug 2017 18:04:43 +0300 Subject: [PATCH 2/2] gnu: keepassx: Superseded by keepassxc. * gnu/packages/password-utils.scm (keepassx)[properties]: New field. --- gnu/packages/password-utils.scm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gnu/packages/password-utils.scm b/gnu/packages/password-utils.= scm index cdd705956..bde1ea854 100644 --- a/gnu/packages/password-utils.scm +++ b/gnu/packages/password-utils.scm @@ -136,7 +136,8 @@ database, which is locked with one master key or a key-= file which can be stored on an external storage device. The databases are encrypted using the algorithms AES or Twofish.") ;; Non functional parts use various licences. - (license license:gpl3))) + (license license:gpl3) + (properties `((superseded . ,keepassxc))))) =20 (define-public shroud (package --=20 2.13.3 --lR6P3/j+HGelbRkf-- --UeXZ3FjlYZvuln/G Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAlmAmVUACgkQQarn3Mo9 g1GdqhAAlJTkU83e68cQGpjaKk6rpO8L0uwetw6H0Q+1A44mbyZeWQNLK3BSXu2j Ie8rbs0mf4zoCL5TPMK2p0sQqhB9Zg2JuuvLkDwFL6LRYw/zZ71t44/OTwkrNIY6 QVtPlweWkjVts5kDT+B1MqS0+USoEpw29wYsMne21Hnfx5D2oruBuD7YKHKpqRiM 11RfEyO76je8Si7I6EBtOKDpd9oBArf0bLnV9Va5psCEGcP0AnfIeU1ZIE+FzltV H8T2tC1//z+kwI7IH/h03PuUbO8aGaX+KSwnpxel4EoqpkJ3uC0wHeJqKER6/iUB MZuTC3ttKOjIwVDrYyGHi+Wcg6PnI2CtC5y4fRV1QBdbgqCx78BEX3MgRTlrCTQl w4b9ojpFFwXhUk3mVJJUnZAcBLr1PNOzc13tryf0/MU1XeLN/3prdvH88mg5XNZu O3mxOqzr+5DZk4BODy4h30uYGcQwQWqeUArAmDTPUVZG8Y/hXsLxW25ZpAtCwb7u mK5iQsJ3TEJ3SoZs2ugRAlYoEeofe4XpcyJUWCWR0wfAlWLoy3zmUX7Z30dkfxF2 b3c90nHjdAIJ8CsjplGwa+5klrHqSkr0/mncji8wk5s79n19Z+cPcsOsa2jhPajy 0JfFZQXzHAcBIcNa/Fx3uh0vIZfcFHKLAsG4ocLCTpL+zHyGwcM= =aeNI -----END PGP SIGNATURE----- --UeXZ3FjlYZvuln/G-- From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 01 15:43:22 2017 Received: (at 27909) by debbugs.gnu.org; 1 Aug 2017 19:43:22 +0000 Received: from localhost ([127.0.0.1]:37292 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcd4c-00014k-8o for submit@debbugs.gnu.org; Tue, 01 Aug 2017 15:43:22 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:40383) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcd4a-00014d-SY for 27909@debbugs.gnu.org; Tue, 01 Aug 2017 15:43:21 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id BB4D52085F; Tue, 1 Aug 2017 15:43:20 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Tue, 01 Aug 2017 15:43:20 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=LimbwJBbsSdMqmulu1NaYHDL4SjGERbjsxm940 TFi9o=; b=TFWNjXk7pSao6LfXpNX0bF+TR01Hi2JDZXSNcoBF3fIz24Q8ifufZc AWBFfNKdvJEqu99y4DuuHFhFsK7CC588jSTiKHHZw3RKBE4jCEs0Ko45taRR7g19 EaSiI5eTzLwSqHKAAbjmgk0NXNz6NJuPChCYfgCPBYJXhrnPpYHos= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=LimbwJBbsSdMqmulu1 NaYHDL4SjGERbjsxm940TFi9o=; b=KhYH/Boye6m0hkiRsKzLdRW6uLZq1R4ItP i0Hg2cdT19Kav/uh2+6Yoeb+PgnCebZP+0cbtbqsJLuhDsKYxeOnrxbzKI8JbbEd 3SzOh9P+lJiOJf29hQNXUSoQU51+qm3EAaVY5ndrYAo8Ra5xnrkKHU7ZdsSfsx1H E9mXaVcjzJOXej3SvO71cDirjn2i4YouQIk10ufbFlacIO0Q3GSGLCPLAW7ETfxR INodj6sG1IugIE9XFOg+Cr+6Rh9PAw/a/D7O7YE4sanQeJCbERlPSMW2prbQGOX1 qKdq9X6ronCdvTx8C360C/12SVytFxrzYNiihGfhRtxuN2VVhmYg== X-ME-Sender: X-Sasl-enc: AuDlUkA/KoorPbbIPGic6zSk7rrnodMOA4nIh0adScb/ 1501616600 Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 857F6248A0; Tue, 1 Aug 2017 15:43:20 -0400 (EDT) Date: Tue, 1 Aug 2017 15:43:19 -0400 From: Leo Famulari To: Efraim Flashner Subject: Re: [bug#27909] Replace keepassx with keepassxc Message-ID: <20170801194319.GA31810@jasmine.lan> References: <20170801150815.GJ2406@macbook42.flashner.co.il> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="6TrnltStXW4iwmi0" Content-Disposition: inline In-Reply-To: <20170801150815.GJ2406@macbook42.flashner.co.il> User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 27909 Cc: 27909@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --6TrnltStXW4iwmi0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, Aug 01, 2017 at 06:08:16PM +0300, Efraim Flashner wrote: > The original keepassx hasn't seen much activity in quite a while, no > bugs fixed or features added. Keepassxc is the community fork of > keepassx. The last keepassx release was in October 2016. That's not *that* long unless there are some serious bugs in the program. Are other distros replacing keepassx? Is keepassxc a "seamless" replacement for keepassx, or would users maybe have to adjust somehow? --6TrnltStXW4iwmi0 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlmA2dMACgkQJkb6MLrK fwiOJBAA6R8ZhkiCduTV/x+uPksX/7GaOQNIo1+U45v6+qaePEoR3n3sAgL1Q0Yl nmLPwoczcVtTED8ft07XehGeP0su29Xk6HmFxEa/eCRDyLPZEwnFxmpJ3yYzx3xL 85ithU8rSfRlZ3X56VPJiV2xLpcTYANZqJtTg+zQHLLw7tWkXtP2aIapKopJ+j7/ p1B4UKnSrWTPKHCKzc8DJeiVAGlEjSDkVWzrMOqDH0SRCNULdE0n6LotTOgp2VOk W8Q+X/FzPOsO29aO0Gb7Mt45IeGIP6/6zU5nVXkhIIX39ncL6MKCH8Z9DR4TnKW8 Aaj+Vu/BIi4ZJvmzw/2T3k9bS065fgfhbA5Vm3w28r2DXnP/gtNpRgQy/PcdtU1O d53KV192MPDpw/YcgO6rbV7zUjPpC58klDuDyTGeq48kNqhuWgOUqyzNjKJ1MnzF BYfuIseNtiDhIaaL4pW6see7vNmIYVUHra8Z+r+hL1rpN7Zt7U/iey3DzRhV/Bsg z2r5vKk+5LSnsDm4sANAY9qHFLDkhFOvKoSCNEyeEyP+vFP3lgwwh8p++IH4L6th jcomm1IyDmEcCf5O9KefMfhZOxbzbqjxVtuj+O07nMwWWlnGTqLMaxzWozzu/rDs EC7n9q+912zoReqr16RHTy1B+EQXIJ7Hb2/GYQNp+/r1xkwbsms= =Ho3s -----END PGP SIGNATURE----- --6TrnltStXW4iwmi0-- From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 01 16:12:00 2017 Received: (at 27909) by debbugs.gnu.org; 1 Aug 2017 20:12:00 +0000 Received: from localhost ([127.0.0.1]:37318 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcdWK-0001k4-5m for submit@debbugs.gnu.org; Tue, 01 Aug 2017 16:12:00 -0400 Received: from flashner.co.il ([178.62.234.194]:49420) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcdWI-0001js-MY for 27909@debbugs.gnu.org; Tue, 01 Aug 2017 16:11:58 -0400 Received: from localhost (46-117-130-79.bb.netvision.net.il [46.117.130.79]) by flashner.co.il (Postfix) with ESMTPSA id 995F140184; Tue, 1 Aug 2017 20:11:52 +0000 (UTC) Date: Tue, 1 Aug 2017 23:11:50 +0300 From: Efraim Flashner To: Leo Famulari Subject: Re: [bug#27909] Replace keepassx with keepassxc Message-ID: <20170801201150.GQ2406@macbook42.flashner.co.il> References: <20170801150815.GJ2406@macbook42.flashner.co.il> <20170801194319.GA31810@jasmine.lan> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="o3Y+93sjbn8Tp8J9" Content-Disposition: inline In-Reply-To: <20170801194319.GA31810@jasmine.lan> User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 27909 Cc: 27909@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) --o3Y+93sjbn8Tp8J9 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Aug 01, 2017 at 03:43:19PM -0400, Leo Famulari wrote: > On Tue, Aug 01, 2017 at 06:08:16PM +0300, Efraim Flashner wrote: > > The original keepassx hasn't seen much activity in quite a while, no > > bugs fixed or features added. Keepassxc is the community fork of > > keepassx. >=20 > The last keepassx release was in October 2016. That's not *that* long > unless there are some serious bugs in the program. >=20 The maintainer is MIA. I'm not aware of serious bugs, other than it still relying on Qt-4. > Are other distros replacing keepassx? >=20 I don't believe Debian is, but there is active work on packaging keepassxc. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D855173 > Is keepassxc a "seamless" replacement for keepassx, or would users maybe > have to adjust somehow? It is supposed to be a seamless replacement, using the same .kdbx files as keepassx. --=20 Efraim Flashner =D7=90=D7=A4=D7=A8=D7=99=D7=9D = =D7=A4=D7=9C=D7=A9=D7=A0=D7=A8 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --o3Y+93sjbn8Tp8J9 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAlmA4IYACgkQQarn3Mo9 g1GdSw/9FliNBpmzeW+RWVGcqZG693AFbYQvMJXWYw1GbZ4ItWSmtYW8i4qkkjFu CY2aL5Ad33olrfm+lyGWhMX4gQHF8VXOeYFlFyyRcb/WXDmNuO116yOSqFqih6Ls Ias6quUF/5rwkeI8DF90SQUXCU5toC+nn5srSMOlaHDduyNDSZmuYHZbMOMdq+cD 9niz9EHxyR0S6pKdTpgW8k+4AT3vKe+Duy7xW3iGaI0QGaxPbVrs7xoG5ytO8zbA sgGBvH8lnRmlaCDkm+LdfalPrLWAwvqtxEbL4cWcgNz1njKK3YSLP/3zbygLptG7 zOL/nY9fQGg+2tTt5boyDZbJMQxaPA0t8wRTE8XYxQgjNyxZmwbBdxLxSQYLrYwj fPc5rDg6AIJRMl3gQccunVo29zlqNuyp+kHTi9a6tDDuU0iVQsPOX67Sur5kQtTr L0oGKc59ndAkPSgyLscy77H40y/er2yqrUxoDuEFphNXs2EL1pwxlFPJerzDbnKO nLWnOstbycMUHinMB5oVuEknBf60OGDi727fQns8dfaHRGTm9T122/skK/d7JCM9 +BH6/SCd29F5tprOcGWNJFXyu2O3x1f0/bVQA5U6wINk76fJmVSHwE00nWaJ5/Ue eecIgakTLTNIMwY8UmHAgTIktT3CXapBWrR03JYUewwksIHgvIo= =PviQ -----END PGP SIGNATURE----- --o3Y+93sjbn8Tp8J9-- From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 01 16:27:19 2017 Received: (at 27909) by debbugs.gnu.org; 1 Aug 2017 20:27:19 +0000 Received: from localhost ([127.0.0.1]:37330 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcdl9-00025q-J6 for submit@debbugs.gnu.org; Tue, 01 Aug 2017 16:27:19 -0400 Received: from mail-yw0-f176.google.com ([209.85.161.176]:33131) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcdl7-00025d-WC for 27909@debbugs.gnu.org; Tue, 01 Aug 2017 16:27:18 -0400 Received: by mail-yw0-f176.google.com with SMTP id p68so17299469ywg.0 for <27909@debbugs.gnu.org>; Tue, 01 Aug 2017 13:27:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=MOO3ZxEoDXd3y+GeK7NR3KBuV+ZW/mI+1Oz+Z3rY2yw=; b=NiY9dDTII2Fz0S75iop/ixCmuJY0xw/pLdH6M1/miimmzlrGQP9OEIgyskdn10eME/ AxvIjw8M6cOkYXHC8S0oE/PAfF0hwzbSfmGfaBncJ9RKITxk3wAS1Nz74Ei5n5ncENR+ 7pwHZLwAv1rcxYsmFSrZC5DTht1N5wotte1K9pTDatAT38SwezWg1Tui79PPiTm6sLI0 mOV81v4HIToxEhjE9LGQrB1ALtDiCjmEWkwNuRDsdXS1AeKsvbqN5YYHvAMEJd+Z5rR0 bgW1U6Dk1WXJY4lkDbW019cAdQddqXNk3P4wpokHlONLrzCH/FkfoBWRL2RoiTFvoZiZ ZTkw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=MOO3ZxEoDXd3y+GeK7NR3KBuV+ZW/mI+1Oz+Z3rY2yw=; b=Qh2SGYHAgt/ak9D3MRcVrz3XmNZyypXd7CRfs+34rWI2nRMZya3nlchxSnuOjKic3m 7kQt2wktT+6xndiRqYXPOXcP7VZ7hw20gwSfC79D8NkbkZcpw94/+Y9iJKA37lA+/B5H GUmo10FEJHSGEFKUBlpGv29GGKmxGXr6vygJK84tLy5PCGzycNnGsm+rigqyLiHadci9 VTsvH9MSGFEUNAfh2rC/wl9CxYETyoTMO7cr/fmVjIAS9lMY38NTG4JeMO3Udb6BZQhG THLog1TU5SxIKoigFKbtIXmnm9xyrCU57T9Wdl2RSjq5NpZvGgMnQt85q5gpBh5F/s/W IGVQ== X-Gm-Message-State: AIVw110Erubl8DUx9G84KX9I+/dyugm4N4CF+kxMIH5BLtV83TFA8X78 Ld2OnyXKkfj02Fdm+hjrXB8dQymwdKvq X-Received: by 10.37.229.198 with SMTP id c189mr14499307ybh.106.1501619232216; Tue, 01 Aug 2017 13:27:12 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.2.193 with HTTP; Tue, 1 Aug 2017 13:27:11 -0700 (PDT) Received: by 10.129.2.193 with HTTP; Tue, 1 Aug 2017 13:27:11 -0700 (PDT) In-Reply-To: References: <20170801150815.GJ2406@macbook42.flashner.co.il> <20170801194319.GA31810@jasmine.lan> <20170801201150.GQ2406@macbook42.flashner.co.il> From: Manolis Ragkousis Date: Tue, 1 Aug 2017 23:27:11 +0300 Message-ID: Subject: Re: [bug#27909] Replace keepassx with keepassxc To: Efraim Flashner Content-Type: multipart/alternative; boundary="94eb2c087746eca0b80555b6f8b0" X-Spam-Score: 0.7 (/) X-Debbugs-Envelope-To: 27909 Cc: 27909@debbugs.gnu.org, Leo Famulari X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.7 (/) --94eb2c087746eca0b80555b6f8b0 Content-Type: text/plain; charset="UTF-8" Wouldn't it be a better option to keep both version for the time being? Unless of course there is a security issue if we keep keepassx. Manolis --94eb2c087746eca0b80555b6f8b0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Wouldn't it b= e a better option to keep both version for the time being? Unless of course= there is a security issue if we keep keepassx.

Manolis= =C2=A0
--94eb2c087746eca0b80555b6f8b0-- From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 01 17:12:42 2017 Received: (at 27909) by debbugs.gnu.org; 1 Aug 2017 21:12:43 +0000 Received: from localhost ([127.0.0.1]:37370 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dceT4-0004wS-LX for submit@debbugs.gnu.org; Tue, 01 Aug 2017 17:12:42 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:50549) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dceT3-0004wK-0N for 27909@debbugs.gnu.org; Tue, 01 Aug 2017 17:12:41 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id E95E32081C; Tue, 1 Aug 2017 17:12:40 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Tue, 01 Aug 2017 17:12:40 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=qNDdka4W6IMZ3A130IjolD2MacyjPKeGnXurqe psSRA=; b=mdKm8RMbENhOR859nU6R3pO3hiG0z4nOS4s7HEhywzzkxPy0chteiU uAtJxNdwKOIPwLUinobv3GokIjanfZaD8QV5aQLqqEkn5SeJLGNeR5g6+ECbgDoB 1LzqYexhPUkelqrH7/waAIMvB4OH2536pHDW0mc0ikN164LkZ0RSs= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=qNDdka4W6IMZ3A130I jolD2MacyjPKeGnXurqepsSRA=; b=eBr4f67TIukarGr0NcbPElUQhOqOpioGdA 5QQiMWnlZNyU6An+pKpryzO0BTxJ9dn4NSpAz9rbWzxHtsrQAP6iw6DY6t3VdP0q ZUoeagsBKdYwiu6zmtQEONhwu8KjWA66BwMSvjIyabTjILWc4XUvXvpaqhVbSK86 /OUHYcU0AMw1HUTRm0KC4N4TUDqbSR7cYwOwZ9TbAFW6vS6Hv0+/qMY8qdh8LPF2 gqHZWAeIIv4K/KfXCU6QPGxVb4g2WpO2Q4+e5Y7HO2Z8Vd0Fs9IOON2fe+tYK2Il XQBhYkYOrPIez15yh5YixOvDhcRO/VNFPgR4ckC94LbMC0UyBtzg== X-ME-Sender: X-Sasl-enc: 2aRFawTgIXZq1iBMzCfvsHHABQHegWiOYHBeSobVVBjH 1501621960 Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id A1FAA7E5F1; Tue, 1 Aug 2017 17:12:40 -0400 (EDT) Date: Tue, 1 Aug 2017 17:12:39 -0400 From: Leo Famulari To: Efraim Flashner Subject: Re: [bug#27909] Replace keepassx with keepassxc Message-ID: <20170801211239.GA5844@jasmine.lan> References: <20170801150815.GJ2406@macbook42.flashner.co.il> <20170801194319.GA31810@jasmine.lan> <20170801201150.GQ2406@macbook42.flashner.co.il> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="envbJBWh7q8WU6mo" Content-Disposition: inline In-Reply-To: <20170801201150.GQ2406@macbook42.flashner.co.il> User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 27909 Cc: 27909@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --envbJBWh7q8WU6mo Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Aug 01, 2017 at 11:11:50PM +0300, Efraim Flashner wrote: > On Tue, Aug 01, 2017 at 03:43:19PM -0400, Leo Famulari wrote: > > The last keepassx release was in October 2016. That's not *that* long > > unless there are some serious bugs in the program. >=20 > The maintainer is MIA. I'm not aware of serious bugs, other than it > still relying on Qt-4. Ah, still using Qt-4 is my pet peeve! :) That means it will have to be removed sooner or later. > > Are other distros replacing keepassx? > >=20 >=20 > I don't believe Debian is, but there is active work on packaging > keepassxc. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D855173 >=20 > > Is keepassxc a "seamless" replacement for keepassx, or would users maybe > > have to adjust somehow? >=20 > It is supposed to be a seamless replacement, using the same .kdbx files > as keepassx. Okay, I'll defer to what others think, especially since I'm not using keepass*. --envbJBWh7q8WU6mo Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlmA7sMACgkQJkb6MLrK fwi2aw/9FxzVwlkO6IOC1hYHZiFr3bATBdiI1V2FPZ4vpq6PSkeXPBZTjIopGZwE XBFqcbHASkJhbBM7XqiTaDEJWfAp4YrZZrAe7IMq0R10PST8lJiwV+yHsZ6b06GG F2YgQIf5XLftiNV3Y4hLCJTE0wZlOY368Y65HtreKNAqRTtuGOVriw9W88+IUCEB zJBLv8WpaOs/3GjepOf7MFuj4MDQxm/tQHJYCzw9zlobVTbPEex46hg4FTdihl33 HW9pdmuL5w+2g5SarGQA/ZLSUqnbVBzsSGt2dGpZ9EXb27UrndvgznJa5mwc9btz Re0/aqlOEZ+9qGFuqZJdJk8qrGMxks3ZbH2OvMn9fiLIq9pTuCGHmWSE9pUDD0Mt JR+AZ5avmOqwEK2X7yejjgBaqIRfeWsfx6S/KPcWKc+HnhQtnmXYlIHPp10JhqyF pbDgypBVIH+OCjxzyCWAZ5orHEGp6+5QB7h4apryEgIOzhkCX0AIiAzaFLhoBVbf 3SUP5raljEIHtENX9/g3sd2gVyCth1L4K6GKenhwV2njYOnWYic1/lN3K48PR557 DVBt3yGwuImdjSvwprR62cnY/9ASuq0nft2/szxk8638a6GxXv8Gb9Fg+/eVl0ZF vYNJHP0W8yo5padRCv0BVuZGpPDoKwkn9tCd7IZYs1VTi2kNUS4= =wjSn -----END PGP SIGNATURE----- --envbJBWh7q8WU6mo-- From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 01 17:17:44 2017 Received: (at 27909) by debbugs.gnu.org; 1 Aug 2017 21:17:44 +0000 Received: from localhost ([127.0.0.1]:37378 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dceXw-00053w-9Z for submit@debbugs.gnu.org; Tue, 01 Aug 2017 17:17:44 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:51393) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dceXu-00053m-4k for 27909@debbugs.gnu.org; Tue, 01 Aug 2017 17:17:42 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 0240D20777; Tue, 1 Aug 2017 17:17:42 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Tue, 01 Aug 2017 17:17:42 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=qww0wbhdFYuSITfaE7mEBTCzx6eR7098WSud9m IdafU=; b=sSe8GroA2QR3MuT/l2y0znnZR3kTVVHrGVV5c9Mftdizm4z9JV1/M+ /IBEavJOu+BBTGNTIoN5QTXl8dXxIqDua3PXGnycNEALS7HAah8o57eXypd39kqT fVPCuFLvbPqWBkKdmEddBnYb2Rjni0GaiigjVmBL+hEBOn0ckzjdM= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=qww0wbhdFYuSITfaE7 mEBTCzx6eR7098WSud9mIdafU=; b=OQiajkhdX9ePpJqXI0kc/VZJ7L0pQmbZ5E iXJk/PvGSWkv0eN41SZXK6ZWIFHQSq6LG3pSJ6GK30dX38mUP7Neeek10z6UOLvV kpeeRm51wWwRP/+yYE/EHJ9fTf3nYPVq/vLYNHwVJ17Wpc5ASWqdEI752SKj/s2b 8qcLdM+iz1xxQMTPduvenpklenFHcWmqfdKgDyHjjGUU3LSrYxjxDpWO9SxR3M6P /xIE3qIgNMNb1Y7iPHfA41deuoiD0WXqwfOs4dXDqnKv04tibC10il7r5XhIBZf2 YxoeAXaD46c4Pn52yHnlC1qj5PmAC+CRfwGYbx0ZRGPWVqToQShg== X-ME-Sender: X-Sasl-enc: O6LsSl7KIUtCtvVgTSE/teWqJ4Tfz1gQeAQWQeSN2moJ 1501622261 Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id B42AE247AD; Tue, 1 Aug 2017 17:17:41 -0400 (EDT) Date: Tue, 1 Aug 2017 17:17:40 -0400 From: Leo Famulari To: Manolis Ragkousis Subject: Re: [bug#27909] Replace keepassx with keepassxc Message-ID: <20170801211740.GB5844@jasmine.lan> References: <20170801150815.GJ2406@macbook42.flashner.co.il> <20170801194319.GA31810@jasmine.lan> <20170801201150.GQ2406@macbook42.flashner.co.il> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="UHN/qo2QbUvPLonB" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 27909 Cc: 27909@debbugs.gnu.org, Efraim Flashner X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --UHN/qo2QbUvPLonB Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, Aug 01, 2017 at 11:27:11PM +0300, Manolis Ragkousis wrote: > Wouldn't it be a better option to keep both version for the time being? > Unless of course there is a security issue if we keep keepassx. I think that using Qt-4 is a security issue because it's unmaintained for a long while now, relative to its complexity. But we still have it in Guix because some packages would have to be removed if we remove it, and we don't have a clear or simple policy about what to do in cases like that. By the way, I'm not suggesting we need such a policy. Eventually we should remove those things, because it's not great to offer users programs that we suspect have security bugs. If somebody starting publishing details of how to exploit Qt-4 apps, then I think the choice would be clear. But I haven't read any such reports, so I don't know for sure that it's vulnerable. I think it's a good bet, however. --UHN/qo2QbUvPLonB Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlmA7/QACgkQJkb6MLrK fwi50hAAvxZwzkOwrflfDYMYXcqj8guo8LWCCtFEBiSc6jPbcbR8SgNvoIHXTqMF WQU6QgE6xC8xymQ+H3Wo0f7c3TdAAxM5jME7/el4iZkEAakUQOOvbadkFh0S1jpD B6ikuGEB8DcJ/GazmLFIDYtPveS6JTr7QJ13+x00dcryxZ8ugMOkF8cUF9VAZxi2 9dL3cwETZEiAuX7lJg2waepmKXUOz55OpxMtvgiwsIsRvQPlqJVWXy4pdJDCaJWh Qq7liPkBNRYSjh56oltvpvqDKH+Uy06p8uAShLJDHHNxO7T8mZlrgycKvOfUdbc0 sewRFhicYvWB08J9ckEbbgcH/NPL/azTaXKVqTfaQQZdIguzTjIAvXLBu7up/0Pb wyU2GRdtZAjyZxustRofiutkXmt6xudaLqkfOzAoTDzf8j7Qz9KDD6GyLVqP5Eir LxYSWJ/Wt456s7O0FlHrvNQuu2xhoI2u1sufDgjD/fp5JiG3Kl1tGCJLw6bIlT7x XHnn+SlmJGpwd4aFtRkkB3WN8IXC1utGGPowOjqDxL7Tz5d3heWtgqQZXTLDkfz/ +OT6VKmseJSE0oABtFk6BqmeBjFA/hKu/EoIztSmo7AVlJogZi7pX8edUdKSiMX2 lXler8cDqo5DMb17pTr64Skr42VquaXGrySXaRBKlCfyzRxfGw0= =mVzY -----END PGP SIGNATURE----- --UHN/qo2QbUvPLonB-- From debbugs-submit-bounces@debbugs.gnu.org Wed Aug 02 14:28:56 2017 Received: (at 27909) by debbugs.gnu.org; 2 Aug 2017 18:28:57 +0000 Received: from localhost ([127.0.0.1]:38764 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcyO8-00064V-Ns for submit@debbugs.gnu.org; Wed, 02 Aug 2017 14:28:56 -0400 Received: from mail-wm0-f46.google.com ([74.125.82.46]:33967) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dcyO7-00063t-Fb for 27909@debbugs.gnu.org; Wed, 02 Aug 2017 14:28:55 -0400 Received: by mail-wm0-f46.google.com with SMTP id t138so42646332wmt.1 for <27909@debbugs.gnu.org>; Wed, 02 Aug 2017 11:28:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:cc:references:to:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=NO0ZdnWDuY0WkQR7l7Rxk6Pze/IwGfGMjbDobypqfes=; b=YMPFA45mKlQjVvVQbYrQDrN7vxPwnRQIK4jDMEDU7A7N9ERvEpIZ16dAiLDEa67nb8 m2UbxB/LMI+W5flIG8AuGnYiaSbeHOhVABY6LE0R0K4E4iz9SoC3ZjQsoz0pxNM1leb5 zMcYUE9+Tl1Gjr/fLJ8Jqk7tkq8SKd+/bjmpkfDq50HycUDghsM4BIPeDcazhV6+hejH QwHyMPNmmFIPxQH0mFuBaeSH4f6drZvHKL768a2ULUOWfCYyXUaTz5wSDnGmNDUnB4CM hGsztG2qXFzxPkQKBBQq032IBjzifv6roJMxP3/9hKZ2Z5OayTlw6GvW1wLcCzi/c4s7 5oiA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:cc:references:to:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=NO0ZdnWDuY0WkQR7l7Rxk6Pze/IwGfGMjbDobypqfes=; b=tGKRLTQUpGMYNPi5TZKs8yZNlDpEQLezUhxpMksClHT9tzK8ZjeR3KKNBJJ69ZD/mp J5195zvjo5BZiFB1s1tk9IBVO5/yI9qrAzBFmYix+oCwjgqkJUhklXpMeVAyPziytRyF zy1eUbG7G8pjmfJSN16voV+6nS2intGAToELTDvjH+AFekIxnUKJPrXOK4r3JNj0f0c9 rXhOl1VTH8iRqIJ/KIiPa8e9XcFuqXX//1wMyJb3rn6gaIW2bFRVcZUPscsAlFNFjoIY zX2qIHO8qvhSEC2GB2grZX9++rSID5yFLRoxmZnNnQTPvf0isp4rwAS6cru20NSUlGgR Vydg== X-Gm-Message-State: AIVw111plXAhTXACrfZFmESP83bzajfPgB2+OSnJevVDZPlchKDjqb5q YIGiyaThEazbDoMev8w= X-Received: by 10.28.126.200 with SMTP id z191mr1868236wmc.46.1501698529258; Wed, 02 Aug 2017 11:28:49 -0700 (PDT) Received: from [192.168.2.110] (ppp-2-84-22-225.home.otenet.gr. [2.84.22.225]) by smtp.gmail.com with ESMTPSA id l43sm17979665wrl.33.2017.08.02.11.28.48 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 02 Aug 2017 11:28:48 -0700 (PDT) Subject: Re: [bug#27909] Replace keepassx with keepassxc References: <20170801150815.GJ2406@macbook42.flashner.co.il> <20170801194319.GA31810@jasmine.lan> <20170801201150.GQ2406@macbook42.flashner.co.il> <20170801211740.GB5844@jasmine.lan> To: Efraim Flashner From: Manolis Ragkousis Message-ID: <73a1c825-d354-8fa0-d878-90c8c6f644be@gmail.com> Date: Wed, 2 Aug 2017 21:28:47 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <20170801211740.GB5844@jasmine.lan> Content-Type: text/plain; charset=windows-1252 Content-Language: en-US Content-Transfer-Encoding: 8bit X-Spam-Score: 0.2 (/) X-Debbugs-Envelope-To: 27909 Cc: 27909@debbugs.gnu.org, Leo Famulari X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.2 (/) On 08/02/2017 12:17 AM, Leo Famulari wrote: > On Tue, Aug 01, 2017 at 11:27:11PM +0300, Manolis Ragkousis wrote: >> Wouldn't it be a better option to keep both version for the time being? >> Unless of course there is a security issue if we keep keepassx. > > I think that using Qt-4 is a security issue because it's unmaintained > for a long while now, relative to its complexity. > > But we still have it in Guix because some packages would have to be > removed if we remove it, and we don't have a clear or simple policy > about what to do in cases like that. By the way, I'm not suggesting we > need such a policy. > > Eventually we should remove those things, because it's not great to > offer users programs that we suspect have security bugs. > > If somebody starting publishing details of how to exploit Qt-4 apps, > then I think the choice would be clear. But I haven't read any such > reports, so I don't know for sure that it's vulnerable. I think it's a > good bet, however. > I tested keepassxc locally and it opens my .kdbx file correctly. I think there will be no problems with the change. If no one else objects please push your patch. We don't want a possible security issue in the future. :) Thank you, Manolis From debbugs-submit-bounces@debbugs.gnu.org Wed Aug 16 11:11:04 2017 Received: (at 27909-done) by debbugs.gnu.org; 16 Aug 2017 15:11:04 +0000 Received: from localhost ([127.0.0.1]:41316 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dhzyJ-0003Pr-SG for submit@debbugs.gnu.org; Wed, 16 Aug 2017 11:11:04 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21060) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dhzyI-0003PY-6i for 27909-done@debbugs.gnu.org; Wed, 16 Aug 2017 11:11:03 -0400 Received: from localhost (141.80.247.215 [141.80.247.215]) by mx.zohomail.com with SMTPS id 1502896257764548.5134007128225; Wed, 16 Aug 2017 08:10:57 -0700 (PDT) References: <20170801150815.GJ2406@macbook42.flashner.co.il> User-agent: mu4e 0.9.18; emacs 25.2.1 From: Ricardo Wurmus To: Efraim Flashner Subject: Re: [bug#27909] Replace keepassx with keepassxc In-reply-to: <20170801150815.GJ2406@macbook42.flashner.co.il> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Wed, 16 Aug 2017 17:10:55 +0200 Message-ID: <87bmnfk0ow.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-ZohoMailClient: External X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 27909-done Cc: 27909-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) Efraim Flashner writes: > The original keepassx hasn't seen much activity in quite a while, no > bugs fixed or features added. Keepassxc is the community fork of > keepassx. I’m closing this because I see that this is in master already. (Commits b7ac10e6da6e2199aa379fdfa19bd43ca8fddc4d and 99672f7b1d255b5cdac73870dfc272ca6799485b). Thank you! -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net From unknown Mon Jun 23 13:09:09 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 14 Sep 2017 11:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator