Re: Kopete: CVE 2017-5593 (User Impersonation Vulnerability)
Luca Beltrame <[email protected]> Tue, 14 Feb 2017 10:19:17 +0100
| Newsgroups | gmane.comp.kde.releases,gmane.comp.kde.devel.kopete |
|---|---|
| Organization | KDE e.V. |
| Message-ID | <[email protected]> |
Il giorno Tue, 14 Feb 2017 09:21:12 +0100 Pali Rohár <[email protected]> ha scritto: > 1) Upstream libiris does not support building dynamic shared library Then they should be pestered until they do, it would at least reduce the impact of issues like this one. > 2) Upstream libiris does not have stable API/ABI Do you know if they at least bump soversions?
signature.asc
(application/pgp-signature, 488 B)
-----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEZ5kvucoFoD6YLac4QMgoFJOwHBYFAliiy5UACgkQQMgoFJOw HBbAjQf/R4+tyHh7l+MJdkJzG9L3rbF+UcM/XpS38fRDEmOXo+cCyL+g6gJf0lzu +bbg3DsM7uBFN9ENaNpEqTXXfMK0d3sdK0U3WDItcE8brHdS1JRRfJbigGLNqVzt YPEUMHQuTiGBEWkHCcRfDK0uZwdA6V7jcNsSBset+scL9VFYjHBBxGc0plB+xv4r TxGslkemXbtnuDhGGz582NrvMJl8daBUHuKtcMSHI+YL2qb9jYv+FUo2vLJtFDUd egHJvULB1VsrCmP2UUA0UivaWnOX+CS34/d87qmhDuJueUqtnKfG+beIKewYWfIo 8L4RByT6eY2bPG0c+01Tv4D/nV/DYw== =T3Yq -----END PGP SIGNATURE-----