Bug#860268: .desktop files can hide malware in Nautilus
intrigeri
intrigeri at debian.org
Fri Sep 1 19:53:44 UTC 2017
Hi!
Micah Lee:
> The upstream nautilus issue [1] has already been resolved, and will be
> released in nautilus 3.24. But since this is an important security
> issue, I think this patch should be backported so that it's fixed in
> older versions of Debian.
Thanks for raising this issue in Debian!
Is there any plan upstream to backport this fix to their 3.22.x
branch, and/or to request a CVE?
Did you personally check whether it's straightforward to backport the
fix to 3.22?
Cheers,
--
intrigeri
More information about the pkg-gnome-maintainers
mailing list