[Pkg-tcltk-devel] Bug#888581: tk8.6: crashes when used as untrusted X client (e.g. ssh -X)

Martin Uecker martin.uecker at med.uni-goettingen.de
Sat Jan 27 12:32:22 UTC 2018

Package: tk8.6
Version: 8.6.6-1+b1
Severity: important
Tags: upstream

Dear Maintainer,

gitk (but affects all tk based programs) crashes when used 
over untrusted X connenctions. The root cause is a missing
error handler for Xlib errors. I submitted an upstream bug
with proposed patch 4 years ago, but it has not been
adressed, see here:


-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages tk8.6 depends on:
ii  libc6           2.24-11+deb9u1
ii  libfontconfig1  2.11.0-6.7+b1
ii  libfreetype6    2.6.3-3.2
ii  libtcl8.6       8.6.6+dfsg-1+b1
ii  libtk8.6        8.6.6-1+b1
ii  libx11-6        2:1.6.4-3
ii  libxext6        2:1.3.3-1+b2
ii  libxft2         2.3.2-1+b2
ii  libxss1         1:1.2.2-1
ii  zlib1g          1:1.2.8.dfsg-5

Versions of packages tk8.6 recommends:
ii  gnome-terminal [x-terminal-emulator]  3.22.2-1
ii  xfce4-terminal [x-terminal-emulator]  0.8.3-1
ii  xterm [x-terminal-emulator]           327-2

tk8.6 suggests no packages.

-- no debconf information

More information about the Pkg-tcltk-devel mailing list