[Pkg-alsa-devel] Bug#962073: alsa-info is calling home without asking

[Elimar Riesebieter]

* Christoph Berg <myon at debian.org> [2020-06-02 23:23 +0200]:

> Package: alsa-utils
> Version: 1.2.2-1
> Severity: serious
> 
> Hi,
> 
> I just launched alsa-info and was surprised that it presented me with
> this popup box:
> 
>             ┌───────────────────────────────────────┐
>             │ Newer version of ALSA-Info has been   │
>             │ found                                 │
>             │                                       │
>             │ Do you wish to download it?           │
>             ├───────────────────────────────────────┤
>             │         < Yes >     < No  >           │
>             └───────────────────────────────────────┘
> 
> Note that this box comes before it asks if the generated report should
> be uploaded somewhere.
> 
> I don't think it is appropriate for a simple CLI utility to call home
> without asking first.

What do you mean with "call home"?

There is indeed a new version available in [0] and [1]. It will be
contributed witch the next release of alsa-utils. So what makes this
"bug" serious?

[0] https://git.alsa-project.org/?p=alsa-utils.git;a=history;f=alsa-info/alsa-info.sh
[1] https://git.alsa-project.org/?p=alsa-utils.git;a=summary

Elimar
-- 
  Learned men are the cisterns of knowledge,
  not the fountainheads ;-)