[Pkg-ltsp-devel] Bug#469462: JFYI: #469462 ltsp: X access wide open on LTSP clients

[vagrant at freegeek.org]

On Sun, Mar 09, 2008 at 02:52:01PM +0100, Moritz Muehlenhoff wrote:
> On Wed, Mar 05, 2008 at 01:29:35PM +0100, Axel Beckert wrote:
> > JFYI: http://bugs.debian.org/469462 may need security updates for
> > Etch...
> 
> Axel, thanks for bringing this our attention. 
> 
> Vagrant, since the ldm source package is not present in Etch, does
> this not affect stable at all or has the code been moved between
> packages?

the ldm package in etch is part of the ltsp source, and while i haven't
verified it for sure, i believe it also is affected by the bug.

the ldm version in etch is implemented in python rather than C, so it
will require a totally different patch.

i will be looking into it over the next couple days.

live well,
  vagrant

p.s. please keep CCing the bug report or
pkg-ltsp-devel at lists.alioth.debian.org so that the rest of the pkg-ltsp
team sees the discussion.