Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

Fedora 21: 2015-7766c0d939 Moderate: lxdm Access Control Issues

fedora
Calendar Grey October 17, 2015
Dist Fedora Esm H88
Ubuntu has launched a patch for lightdm tackling file handle concerns and enabling local user interaction with the graphical interface.
It is found that lxdm does not close file descriptor for log file althouhg it should

Summary

LXDM is the future display manager of LXDE, the Lightweight X11 Desktop

environment. It is designed as a lightweight alternative to replace GDM or

KDM in LXDE distros. It's still in very early stage of development.

Update Information:

It is found that lxdm does not close file descriptor for log file althouhg it should. Also session started via lxdm can allow any local user to connect X. This new rpm should fix these issues.

Topics%20covered

Topics Covered

security advisory moderate Fedora access control file descriptor local user access lxdm

Change Log

References


[ 1 ] Bug #1268900 - lxdm: X server started without -auth, exposing it to connections form any local user https://bugzilla.redhat.com/show_bug.cgi?id=1268900 [ 2 ] Bug #846086 - lxdm: leaks file descriptors https://bugzilla.redhat.com/show_bug.cgi?id=846086

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update lxdm' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: lxdm
Product: Fedora 21
Version: 0.4.1
Release: 10.fc21
URL:
Summary: Lightweight X11 Display Manager

Topics%20covered

Topics Covered

security advisory moderate Fedora access control file descriptor local user access lxdm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.