severity 318123 important
thanks

On Sat, Dec 09, 2006 at 11:36:02AM -0500, Michael Stone wrote:
> The best solution for now is probably just to conflict with
> libpam-opensc

NMU'd with this 'solution' -- downgrading this bug and its sister one
accordingly. I don't consider this bug adequately solved, but this
solution IMHO trumps having nothing at all and hence no xlock in etch.

NMU patch attached.

--Jeroen

-- 
Jeroen van Wolffelaar
[EMAIL PROTECTED] (also for Jabber & MSN; ICQ: 33944357)
http://Jeroen.A-Eskwadraat.nl
diff -u xlockmore-5.22/debian/control xlockmore-5.22/debian/control
--- xlockmore-5.22/debian/control
+++ xlockmore-5.22/debian/control
@@ -10,7 +10,7 @@
 Depends: ${shlibs:Depends}
 Suggests: fortune
 Recommends: libpam-modules
-Conflicts: xlockmore, libpam-modules (<< 0.76-13.1), xbase (<< 3.3.2.3a-2)
+Conflicts: xlockmore, libpam-modules (<< 0.76-13.1), xbase (<< 3.3.2.3a-2), 
libpam-p11, libpam-opie
 Replaces: xlockmore
 Provides: xlockmore
 Priority: optional
@@ -31,7 +31,7 @@
 Depends: ${shlibs:Depends}
 Suggests: fortune
 Recommends: libpam-modules
-Conflicts: xlockmore-gl, libpam-modules (<< 0.76-13.1), xbase (<< 3.3.2.3a-2)
+Conflicts: xlockmore-gl, libpam-modules (<< 0.76-13.1), xbase (<< 3.3.2.3a-2), 
libpam-p11, libpam-opie
 Replaces: xlockmore-gl
 Priority: extra
 Description: Lock X11 display until password is entered.
diff -u xlockmore-5.22/debian/changelog xlockmore-5.22/debian/changelog
--- xlockmore-5.22/debian/changelog
+++ xlockmore-5.22/debian/changelog
@@ -1,3 +1,11 @@
+xlockmore (1:5.22-1.2) unstable; urgency=high
+
+  * Non-Maintainer Upload to address RC bug
+  * Add conflicts on libpam-opie and libpam-p11, mitigating a potential
+    security issue (addressing: #318123, #399003)
+
+ -- Jeroen van Wolffelaar <[EMAIL PROTECTED]>  Wed, 17 Jan 2007 01:49:41 +0100
+
 xlockmore (1:5.22-1.1) unstable; urgency=medium
 
   * Non-maintainer upload, BSP Zurich/Switzerland

Reply via email to