Hi,

Can you sync with the release team to see if they're OK pushing this to
wheezy?

Thank you.


On Fri, Jan 18, 2013 at 6:49 PM, <intrig...@debian.org> wrote:

> Package: pidgin-otr
> Version: 3.2.1-3
> Severity: important
> Tags: security
>
> Hi,
>
> the 3.2.1 upstream release brought in an updated French translation,
> which was great.
>
> Unfortunately, this translation has a few bugs, among which some are
> serious: a few missing %s placeholders make it so the OTR user is not
> correctly made aware of the security status of the current discussion.
> I'm specifically thinking of strings such as "La confidentialité de
> cette conversation est désormais :" that lacks the %s.
>
> I believe that failing to communicate their current security level to
> the user, in an implementation of OTR, has a (admittedly, non
> critical) security impact. I think this should be fixed in Wheezy.
>
> Upstream 4.0.0 shipped with a reworked French translation that fixes
> these problems. Unfortunately, this new upstream release was uploaded
> to unstable, so the translation fix will have to go through t-p-u :(
>
> I'll shortly provide a patch that fixes the worse problems, as well as
> a few trivial typo fixes.
>
> Cheers,
> --
>   intrigeri
>   | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
>   | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
>
> --
> Thibaut VARENE
> http://hacks.slashdirt.org/
> <https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc>

Reply via email to