[pkg-cinnamon] Cinnamon screensaver security issue

[Fabio Fantoni]

Il 15/05/2014 12:05, László Böszörményi (GCS) ha scritto:
> Hi Team,
>
> Any plan, ETA of uploading Cinnamon to Sid? There's a local security
> bug in its screensaver, got the CVE-2014-1949 id[1][2]. Upstream
> bugreport[3] reveals that the fix is under progress. As Clement
> Lefebvre noted some days ago, "We fixed something that could relate to
> this today. Please re-test with git-latest, it could potentially fix
> this problem.".
>
> It would be nice to upload Cinnamon to Sid for further testing by the
> users. While ironing out any remainder problems, upload the security
> fix as soon as available.

Unfortunately currently cinnamon has not been fully loaded in 
experimental, although it is ready for more than 2 weeks:(
https://ftp-master.debian.org/new/cinnamon-screensaver_2.2.0-1.html (+ 
other cinnamon related/dependecies packages)
Cinnamon in sid have also other critical problems, for example on my 
sid/experimental testing installation is unusable for several months.
I hope that the situation will unlock as soon as possible.

Sorry for my bad english.

>
> Regards,
> Laszlo/GCS
> [1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1949
> [2] https://access.redhat.com/security/cve/CVE-2014-1949
> [3] https://github.com/linuxmint/cinnamon-screensaver/issues/44
>
> https://lists.alioth.debian.org/mailman/listinfo/pkg-cinnamon-team
> to unsubscribe: mailto:pkg-cinnamon-team-request at lists.alioth.debian.org?subject=unsubscribe
>
>
> -----
> Nessun virus nel messaggio.
> Controllato da AVG - www.avg.com
> Versione: 2014.0.4570 / Database dei virus: 3950/7496 -  Data di rilascio: 14/05/2014
>
>


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4297 bytes
Desc: Firma crittografica S/MIME
URL: <http://lists.alioth.debian.org/pipermail/pkg-cinnamon-team/attachments/20140515/6d6555e0/attachment.bin>