Dropping kdesudo

Simon Quigley tsimonq2 at kubuntu.org
Tue Sep 5 21:43:09 UTC 2017


Hello everybody,

kdesudo is a tool currently installed in Kubuntu that I believe still
uses Qt/KDE 3 or at minimum Qt/KDE 4 libraries. The upstream (us,
actually...) doesn't seem to have been committed to it since 2011,
leaving users with a vulnerable kdesudo application (kdesu has had
multiple CVEs issued against it). At this point I think it's more of a
liability to maintain than to drop, and following the mail to drop Qt 4
in Debian Buster[1], I would like to request feedback and see if anyone
plans on resurrecting kdesudo or if we should just use kdesu from now on
(maybe provide a symlink for compatibility) and drop kdesudo.

Thoughts? (Am I missing something?)

[1] https://lists.debian.org/debian-devel-announce/2017/08/msg00006.html

-- 
Simon Quigley
tsimonq2 at kubuntu.org
tsimonq2 on freenode and OFTC
5C7A BEA2 0F86 3045 9CC8
C8B5 E27F 2CF8 458C 2FA4

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kubuntu-devel/attachments/20170905/fbabacb3/attachment.sig>


More information about the kubuntu-devel mailing list