Bug#860268: [Fwd: Re: Bug#860268: .desktop files can hide malware in Nautilus]

Yves-Alexis Perez corsac at debian.org
Thu Oct 5 19:42:42 UTC 2017


On Sat, 2017-09-23 at 01:38 +0100, Phil Wyett wrote:
> Hi Security Team,
> > 
> > Please accept the attached 'nautilus' debdiff for stretch-security.
> > 
> > Info:
> > 
> > The debdiff is a backport of the fix from upstream[1] and includes
> > translations
> > for the UI changes.
> > 
> > [1]: https://github.com/GNOME/nautilus/commit/1630f53481f445ada0a455e9979236d3
> > 1a
> > 8d3bb0

Hi Phil,

the debdiff looks good, but please use +deb9u1 as suffix for the version
number. You may then proceed with the upload to security-master.

Note that since it's the first nautilus security upload to stretch it needs to
be build with -sa.

You can safely upload a source-only upload, but you need to remove the
.buildinfo from the changes file before uploading.

Regards,
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20171005/9a4ec3a1/attachment.sig>


More information about the pkg-gnome-maintainers mailing list