Re: Security vulnerability in .desktop files

On Thursday, August 8, 2019 5:19:51 AM EDT Oleg K. wrote: > Hello, All. > > I'm just a linux user and do not know in details the support process in > Debian and KDE teams. > What can you say about .desktop arbitrary code execution when user opens a > folder with "bad" file, which is found here -

Bug#922707: Raising severity

severity 922707 normal thanks Raising the severity of the bug, this is clearly something that needs to be fixed

Processed: Raising severity

Processing commands for cont...@bugs.debian.org: > severity 922707 normal Bug #922707 [qtbase5-doc-html] qtbase5-doc-html: please consider packaging doxygen .tags files with -dev package, not -doc Bug #933960 [qtbase5-doc-html] qtbase-opensource-src: .tag files do not belong into doc packages Se

Bug#933960: qtbase-opensource-src: .tag files do not belong into doc packages

Hi Jiri! El vie., 9 ago. 2019 11:21, Jiri Palecek escribió: > On Mon, 05 Aug 2019 11:45:54 -0300 > =?utf-8?q?Lisandro_Dami=C3=A1n_Nicanor_P=C3=A9rez_Meyer?= wrote: > > Source: qtbase-opensource-src > > Version: 5.11.3+dfsg1-2 > > Severity: normal > > > > Jonathan Ridell just reported that some K

kconfig_5.54.0-2_source.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 09 Aug 2019 08:00:58 -0300 Source: kconfig Architecture: source Version: 5.54.0-2 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers Changed-By: Maximiliano Curia Closes: 934267

Processing of kconfig_5.54.0-2_source.changes

kconfig_5.54.0-2_source.changes uploaded successfully to localhost along with the files: kconfig_5.54.0-2.dsc kconfig_5.54.0-2.debian.tar.xz kconfig_5.54.0-2_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)

Bug#934267: marked as done (kconfig: CVE-2019-14744)

Your message dated Fri, 09 Aug 2019 19:19:56 + with message-id and subject line Bug#934267: fixed in kconfig 5.54.0-2 has caused the Debian Bug report #934267, regarding kconfig: CVE-2019-14744 to be marked as done. This means that you claim that the problem has been dealt with. If this is no

kconfig_5.54.0-1+deb10u1_amd64.changes ACCEPTED into proposed-updates->stable-new

Mapping stable-security to proposed-updates. Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 08 Aug 2019 23:35:27 +0200 Source: kconfig Binary: libkf5config-bin libkf5config-bin-dbgsym libkf5config-data libkf5config-dev libkf5config-dev-bin libkf5config-dev-bin-

kconfig_5.28.0-2+deb9u1_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new

Mapping oldstable-security to oldstable-proposed-updates. Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 08 Aug 2019 22:51:25 +0200 Source: kconfig Binary: libkf5config-dev libkf5config-bin-dev libkf5configgui5 libkf5configcore5 libkf5config-data libkf5config-b

Bug#933960: qtbase-opensource-src: .tag files do not belong into doc packages

On Mon, 05 Aug 2019 11:45:54 -0300 =?utf-8?q?Lisandro_Dami=C3=A1n_Nicanor_P=C3=A9rez_Meyer?= wrote: > Source: qtbase-opensource-src > Version: 5.11.3+dfsg1-2 > Severity: normal > > Jonathan Ridell just reported that some KDE packages (and then Scarlett checked > that Qt has the same issue) ship th

Processed: your mail

Processing commands for cont...@bugs.debian.org: > reassign 933960 qtbase5-doc-html Bug #933960 [src:qtbase-opensource-src] qtbase-opensource-src: .tag files do not belong into doc packages Bug reassigned from package 'src:qtbase-opensource-src' to 'qtbase5-doc-html'. No longer marked as found in

Processed (with 1 error): your mail

Processing commands for cont...@bugs.debian.org: > forcemerge 922707 933960 Bug #922707 [qtbase5-doc-html] qtbase5-doc-html: please consider packaging doxygen .tags files with -dev package, not -doc Unable to merge bugs because: package of #933960 is 'src:qtbase-opensource-src' not 'qtbase5-doc-h

okteta_0.26.2-1_amd64.changes ACCEPTED into experimental, experimental

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 09 Aug 2019 09:35:54 +0200 Source: okteta Binary: libkasten4controllers0 libkasten4controllers0-dbgsym libkasten4core0 libkasten4core0-dbgsym libkasten4gui0 libkasten4gui0-dbgsym libkasten4okteta2controllers0 li

okteta_0.26.2-1_amd64.changes is NEW

binary:libkasten4controllers0 is NEW. binary:libkasten4core0 is NEW. binary:libkasten4gui0 is NEW. binary:libkasten4okteta2controllers0 is NEW. binary:libkasten4okteta2core0 is NEW. binary:libkasten4okteta2gui0 is NEW. binary:libokteta-l10n is NEW. binary:libokteta3core0 is NEW. binary:libokteta3gu

Processing of okteta_0.26.2-1_amd64.changes

okteta_0.26.2-1_amd64.changes uploaded successfully to localhost along with the files: okteta_0.26.2-1.dsc okteta_0.26.2.orig.tar.xz okteta_0.26.2.orig.tar.xz.asc okteta_0.26.2-1.debian.tar.xz libkasten4controllers0-dbgsym_0.26.2-1_amd64.deb libkasten4controllers0_0.26.2-1_amd64.deb l