CVE-2018-13054: privilege escalation in cinnamon-settings-users.py GUI
fixed 903201 3.8.8-1
thanks
Hi all,
there is still
#903201 cinnamon: CVE-2018-13054: privilege escalation in cinnamon-settings-users.py GUI
open, but it is already fixed in 3.8.8, so I am closing this bug now and
mark it as fixed in 3.8.8-1 in buster.
There is a fix to remove the root owned .face file that is not
incorporated, we could add that later on. For the time being I create a
buster branch that incorporates that fix. We will see if we upload it to
a point release.
Best
Norbert
--
PREINING Norbert http://www.preining.info
Accelia Inc. + IFMGA ProGuide + TU Wien + JAIST + TeX Live + Debian Dev
GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
Reply to: