[Secure-testing-team] #469462: X access wide open on LTSP clients

[Nico Golde]

Hi vagrant,
* vagrant at freegeek.org <vagrant at freegeek.org> [2008-03-11 21:13]:
> due to slow buildd's, it has been quite some time since ldm has migrated
> from unstable to testing (mainly mips*, though others as well).
> 
> because of that, the version of ldm in testing is basically incompatible
> with the version of ltsp in testing (scripts to run ldm from ltsp were
> moved from the ltsp-client-core package into ldm itself), so simply
> patching the version of ldm in testing for security only issues would
> not really be particularly useful.

Sorry but I don't get it. Why is it a problem to upload a 
patched version to testing that fixes this issue?

> so i'm wondering what the options are for getting a fixed ldm package
> into testing.

The other option would be to ask Steve Langasek from the 
release team to bump the priority of ldm in the NEEDS-BUILD 
queues of these build daemons.
Kind regards
Nico
-- 
Nico Golde - http://www.ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20080311/51f47553/attachment.pgp