Bug#860268: .desktop files can hide malware in Nautilus

Donncha O'Cearbhaill donncha at donncha.is
Thu Sep 7 10:59:00 UTC 2017


Hi,

Thank you Phil for providing a backport patch. What is the next step
needed to get this fix released as a backport? The .desktop security
issue is widely know and can be exploited in the wild [1]. IMO this
fixed should be made available as soon as possible.

Regards,
Donncha

[1] https://github.com/freedomofpress/securedrop/issues/2238

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 630 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20170907/a988341c/attachment.sig>


More information about the pkg-gnome-maintainers mailing list