Bug#860268: [Fwd: Re: Bug#860268: .desktop files can hide malware in Nautilus]

[Yves-Alexis Perez]

On Thu, 2017-10-05 at 21:42 +0200, Yves-Alexis Perez wrote:
> On Sat, 2017-09-23 at 01:38 +0100, Phil Wyett wrote:
> > Hi Security Team,
> > > 
> > > Please accept the attached 'nautilus' debdiff for stretch-security.
> > > 
> > > Info:
> > > 
> > > The debdiff is a backport of the fix from upstream[1] and includes
> > > translations
> > > for the UI changes.
> > > 
> > > [1]: https://github.com/GNOME/nautilus/commit/1630f53481f445ada0a455e997
> > > 9236d3
> > > 1a
> > > 8d3bb0
> 
> Hi Phil,
> 
> the debdiff looks good, but please use +deb9u1 as suffix for the version
> number. You may then proceed with the upload to security-master.
> 
> Note that since it's the first nautilus security upload to stretch it needs
> to
> be build with -sa.
> 
> You can safely upload a source-only upload, but you need to remove the
> .buildinfo from the changes file before uploading.

I'll take care of the upload. Do you intend to backport the patches to Jessie?

Regards,
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20171007/67a8697e/attachment.sig>