Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 11.10: USN-1382-1 Moderate: Light Display Manager Access Issue

ubuntu
Calendar Grey March 5, 2012
Scroller Ubuntu
Tackling the Display Management Flaw in Ubuntu 11.10 to avert accessibility problems and mitigate security risks.
Light Display Manager would allow unintended access to file descriptors.

Summary

Light Display Manager would allow unintended access to file descriptors.

Software Description:

- lightdm: Display Manager

Details:

Austin Clements discovered that Light Display Manager incorrectly leaked

file descriptors to child processes. A local attacker can use this to

bypass intended permissions and write to the log file, cause a denial of

service, or possibly have another unknown impact.

Topics%20covered

Topics Covered

security advisory denial of service access issue ubuntu light display manager

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  liblightdm-gobject-1-0          1.0.6-0ubuntu1.4
  liblightdm-qt-1-0               1.0.6-0ubuntu1.4
  lightdm                         1.0.6-0ubuntu1.4
  lightdm-gtk-greeter             1.0.6-0ubuntu1.4
  lightdm-qt-greeter              1.0.6-0ubuntu1.4

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1382-1

https://bugs.launchpad.net/lightdm/+bug/927060

March 05, 2012

Topics%20covered

Topics Covered

security advisory denial of service access issue ubuntu light display manager

Package Information

https://launchpad.net/ubuntu/+source/lightdm/1.0.6-0ubuntu1.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.