[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security Issue of .desktop files



Le mardi 24 février 2009 à 15:21 -0300, Daniel Ruoso a écrit :
> Last week, an old security issue in desktop environments went through a
> widely public discussion (including on slashdot)[1][2]. As I said, this
> issue is not new[3], but there seem to be no action on the upstream to
> fix it.

On the contrary, there is action upstream to fix it, and Nautilus 2.26
will only launch “safe” .desktop files.

Once it is ready, I’ll have a look whether it is possible to backport
the changes to lenny, but it will probably be non-trivial.

-- 
 .''`.      Debian 5.0 "Lenny" has been released!
: :' :
`. `'   Last night, Darth Vader came down from planet Vulcan and told
  `-    me that if you don't install Lenny, he'd melt your brain.

Attachment: signature.asc
Description: Ceci est une partie de message =?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=


Reply to: