hi there, Some time ago, CVE-2007-3920 was reported as a vulnerability on compiz, but I have yet to see any comment from the compiz/compiz-fusion folks about it. I've submitted a bug to the opencompositing bugzilla database, but it's been over a week without any comment: http://bugs.opencompositing.org/show_bug.cgi?id=668 looking at the recent lack of activity in the bts i wonder if maybe i've reported this issue to the wrong place? or maybe it's just all this objectframework stuff is taking up the dev team's time? in any event the bug report has a pretty concise summary and i'd appreciate some official comment on the compiz/compiz-fusion opinion of the bug . thanks! (please continue to cc me and the debian bug address i've cc'd, as neither of us are subscribed to the list :) sean
Attachment:
signature.asc
Description: This is a digitally signed message part.