Package: caja Version: 1.8.2-3 Followup-For: Bug #781608 Control: severity -1 serious Control: forwarded -1 https://github.com/mate-desktop/caja/issues/398
Dear Kees, dear Debian Security Team, @Kees: Thanks for bringing up this issue. I actually think that the issue is more severe than just "normal", so raising severity on this. @Security Team: I'd like to receive advise on this issue. Is it actually appropriate to file a CVE for what Kees describes in his original post [1]? light+love, Mike [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781608#5 -- System Information: Debian Release: 8.0 APT prefers stable APT policy: (990, 'stable'), (500, 'testing-updates'), (500, 'testing-proposed-updates'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) Versions of packages caja depends on: ii caja-common 1.8.2-3 ii desktop-file-utils 0.22-1 ii gvfs 1.22.2-1 ii libatk1.0-0 2.14.0-1 ii libc6 2.19-15 ii libcairo2 1.14.0-2.1 ii libcaja-extension1 1.8.2-3 ii libexempi3 2.2.1-2 ii libexif12 0.6.21-2 ii libfontconfig1 2.11.0-6.3 ii libfreetype6 2.5.2-3 ii libgail18 2.24.25-3 ii libgdk-pixbuf2.0-0 2.31.1-2+b1 ii libglib2.0-0 2.42.1-1 ii libglib2.0-data 2.42.1-1 ii libgtk2.0-0 2.24.25-3 ii libice6 2:1.0.9-1+b1 ii libmate-desktop-2-17 1.8.1+dfsg1-3 ii libpango-1.0-0 1.36.8-3 ii libpangocairo-1.0-0 1.36.8-3 ii libpangoft2-1.0-0 1.36.8-3 ii libselinux1 2.3-2 ii libsm6 2:1.2.2-1+b1 ii libstartup-notification0 0.12-4 ii libunique-1.0-0 1.1.6-5 ii libx11-6 2:1.6.2-3 ii libxext6 2:1.3.3-1 ii libxml2 2.9.1+dfsg1-5 ii libxrender1 1:0.9.8-1+b1 ii mate-desktop 1.8.1+dfsg1-3 ii shared-mime-info 1.3-1 Versions of packages caja recommends: ii gvfs-backends 1.22.2-1 Versions of packages caja suggests: ii engrampa 1.8.1+dfsg1-1 ii gstreamer0.10-tools 0.10.36-1.5 pn meld <none> -- debconf-show failed -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org