Ubuntu 12.10 USN-1701-1 Critical: Vino Clipboard Leak Issue

ubuntu

January 22, 2013

Vino could be made to expose sensitive information over the network.

Summary

Vino could be made to expose sensitive information over the network.

Software Description:

- vino: VNC server for GNOME

Details:

It was discovered that Vino incorrectly transmitted clipboard activity

before authenticating the remote connection. A remote attacker could

connect to Vino and monitor clipboard activity.

Topics Covered

security advisory critical remote access ubuntu network exploit clipboard leak vino

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  vino                            3.6.0-0ubuntu1.1

Ubuntu 12.04 LTS:
  vino                            3.4.2-0ubuntu1.2

Ubuntu 11.10:
  vino                            3.2.0-0ubuntu1.2

Ubuntu 10.04 LTS:
  vino                            2.28.2-0ubuntu2.2

After a standard system update you need to restart your session to make all
the necessary changes.