[FusionDev] CVE-2007-3920 anyone?

[sean finney]

hi there,

Some time ago, CVE-2007-3920 was reported as a vulnerability on compiz, but I 
have yet to see any comment from the compiz/compiz-fusion folks about it.  
I've submitted a bug to the opencompositing bugzilla database, but it's been 
over a week without any comment:

http://bugs.opencompositing.org/show_bug.cgi?id=668

looking at the recent lack of activity in the bts i wonder if maybe i've 
reported this issue to the wrong place?  or maybe it's just all this 
objectframework stuff is taking up the dev team's time?

in any event the bug report has a pretty concise summary and i'd appreciate 
some official comment on the compiz/compiz-fusion opinion of the bug .

thanks!

(please continue to cc me and the debian bug address i've cc'd, as neither of 
us are subscribed to the list :)

	sean
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://lists.compiz-fusion.org/pipermail/dev/attachments/20071214/2120a098/attachment.pgp