<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EstiloDeEmail17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EstiloDeEmail18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EstiloDeEmail19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=ES link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='color:#1F497D'>Package: nautilus<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Status: install ok installed<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Priority: optional<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Section: gnome<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Installed-Size: 1408<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Maintainer: Josselin
Mouette <joss@debian.org><o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Architecture: i386<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Source: nautilus
(2.14.3-11)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Version: 2.14.3-11+b1<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Replaces:
libnautilus2-2<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Depends: libart-2.0-2
(>= 2.3.16), libatk1.0-0 (>= 1.12.2), libbonobo2-0 (>= 2.13.0), libc6
(>= 2.3.6-6), libeel2-2.14, libesd0 (>= 0.2.35) | libesd-alsa0 (>=
0.2.35), libexif12, libgail-common (>= 1.6.6), libgail17 (>= 1.6.6), libgconf2-4
(>= 2.13.5), libglade2-0 (>= 1:2.5.1), libglib2.0-0 (>= 2.12.0),
libgnome-desktop-2 (>= 2.11.1), libgnome2-0 (>= 2.14.1),
libgnomecanvas2-0 (>= 2.11.1), libgnomeui-0 (>= 2.13.0), libgnomevfs2-0
(>= 2.13.92), libgtk2.0-0 (>= 2.8.0), libnautilus-extension1 (>=
2.14.0), liborbit2 (>= 1:2.14.1), libpango1.0-0 (>= 1.14.8), libpopt0
(>= 1.10), librsvg2-2 (>= 2.12.7), libstartup-notification0 (>=
0.8-1), libx11-6, libxml2 (>= 2.6.27), nautilus-data (= 2.14.3-11),
shared-mime-info, gnome-control-center (>= 2.6), desktop-file-utils (>=
0.7)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Recommends:
desktop-base (>= 0.2), eject, nautilus-cd-burner (>= 2.6),
librsvg2-common, libgnomevfs2-extra, fam<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Suggests: eog, evince
| pdf-viewer, totem | mp3-decoder<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Conflicts:
libnautilus2-2, libnautilus2-dev<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'>Description: file
manager and graphical shell for GNOME<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'> Nautilus is the
official file manager for the GNOME desktop. It allows<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'> to browse
directories, preview files and launch applications associated<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'> with them. It is
also responsible for handling the icons on the GNOME<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'> </span><span
style='color:#1F497D'>desktop. It works on local and remote filesystems.<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'> .<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'> Several icon themes and
components for viewing different kinds of files<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'> are available in separate
packages.<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'> .<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'> URL:
http://www.gnome.org/projects/nautilus/<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>Subject: gnome: Nautilus shows a preview of
other users files even when the permissions are 700<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>Package: Nautilus 2.14.3-11+b1<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>Severity: grave<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>Justification: user security hole<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>Tags: security<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>*** Please type your report below this line
***<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>If you have a JPG or other image, Nautilus
shows a small preview of the <o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>file to other users with access to the
folder, even with no permissions to read the file. It should NEVER show the
small thumbnail, as it offers sufficient information to anybody that should not
access this info. I attach a printscreen where you can see a file called
“carolNY.jpg”, with permissions 600. Nautilus was launched from another user,
and it was possible to see the thumbnail, as shown in the printscreen.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>You have refused a previous bug submit
because it had no package. I’m including the package name and version that I
think it is failing.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR><o:p> </o:p></span></p>
<p class=MsoNormal>-- System Information:<o:p></o:p></p>
<p class=MsoNormal>Debian Release: 4.0<o:p></o:p></p>
<p class=MsoNormal> APT prefers oldstable<o:p></o:p></p>
<p class=MsoNormal> <span lang=PT-BR>APT policy: (500, 'oldstable'),
(500, 'stable')<o:p></o:p></span></p>
<p class=MsoNormal><span lang=PT-BR>Architecture: i386 (i686)<o:p></o:p></span></p>
<p class=MsoNormal>Shell: /bin/sh linked to /bin/bash<o:p></o:p></p>
<p class=MsoNormal>Kernel: Linux 2.6.18-6-686<o:p></o:p></p>
<p class=MsoNormal>Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8
(charmap=UTF-8)<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>