r13276 - in /desktop/unstable/gnome-screensaver/debian: changelog patches/01_compiz_lock_bypass_CVE-2007-3920.patch

[joss at users.alioth.debian.org]

Author: joss
Date: Fri Oct 26 09:54:04 2007
New Revision: 13276

URL: http://svn.debian.org/wsvn/pkg-gnome/?sc=1&rev=13276
Log:
* 01_compiz_lock_bypass_CVE-2007-3920.patch: place fix of the 
  security upload in a proper separate patch.
* Non-maintainer upload by the testing-security team
* Prevent screen lock bypass via shortcuts when compiz is running
  (Closes: #446906) Fixes: CVE-2007-3920

Added:
    desktop/unstable/gnome-screensaver/debian/patches/01_compiz_lock_bypass_CVE-2007-3920.patch
Modified:
    desktop/unstable/gnome-screensaver/debian/changelog

Modified: desktop/unstable/gnome-screensaver/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/gnome-screensaver/debian/changelog?rev=13276&op=diff
==============================================================================
--- desktop/unstable/gnome-screensaver/debian/changelog (original)
+++ desktop/unstable/gnome-screensaver/debian/changelog Fri Oct 26 09:54:04 2007
@@ -7,7 +7,19 @@
   [ Sven Arvidsson ]
   * Add man pages (Closes: #438606)
 
- -- Sven Arvidsson <sa at whiz.se>  Thu, 27 Sep 2007 17:59:01 +0200
+  [ Josselin Mouette ]
+  * 01_compiz_lock_bypass_CVE-2007-3920.patch: place fix of the 
+    security upload in a proper separate patch.
+
+ -- Josselin Mouette <joss at debian.org>  Fri, 26 Oct 2007 11:54:04 +0200
+
+gnome-screensaver (2.20.0-1.1) unstable; urgency=high
+
+  * Non-maintainer upload by the testing-security team
+  * Prevent screen lock bypass via shortcuts when compiz is running
+    (Closes: #446906) Fixes: CVE-2007-3920
+
+ -- Steffen Joeris <white at debian.org>  Wed, 24 Oct 2007 13:08:36 +0000
 
 gnome-screensaver (2.20.0-1) unstable; urgency=low
 

Added: desktop/unstable/gnome-screensaver/debian/patches/01_compiz_lock_bypass_CVE-2007-3920.patch
URL: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/gnome-screensaver/debian/patches/01_compiz_lock_bypass_CVE-2007-3920.patch?rev=13276&op=file
==============================================================================
--- desktop/unstable/gnome-screensaver/debian/patches/01_compiz_lock_bypass_CVE-2007-3920.patch (added)
+++ desktop/unstable/gnome-screensaver/debian/patches/01_compiz_lock_bypass_CVE-2007-3920.patch Fri Oct 26 09:54:04 2007
@@ -1,0 +1,13 @@
+only in patch2:
+unchanged:
+--- gnome-screensaver-2.20.0.orig/src/gs-manager.c
++++ gnome-screensaver-2.20.0/src/gs-manager.c
+@@ -1045,7 +1045,7 @@
+         }
+ 
+         /* Move keyboard and mouse grabs so dialog can be used */
+-        gs_grab_move_to_window (manager->priv->grab,
++        gs_grab_grab_window (manager->priv->grab,
+                                 gs_window_get_gdk_window (window),
+                                 gs_window_get_screen (window),
+                                 FALSE);