Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 17.04 USN-3285-1 Moderate: LightDM Access Control Risk

ubuntu
Calendar Grey May 12, 2017
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-3285-2 deals with vulnerabilities in LightDM that allow unauthorized file access.
LightDM could allow unintended access to files.

Summary

LightDM could allow unintended access to files.

Software Description:

- lightdm: Display Manager

Details:

Tyler Hicks discovered that LightDM did not confine the user session for guest

users. An attacker with physical access could use this issue to access files

and other resources that they should not be able to access. In the default

installation, this includes files in the home directories of other users on the

system. This update fixes the issue by disabling the guest session. It may be

re-enabled in a future update. Please see the bug referenced below for

instructions on how to manually re-enable the guest session.

Topics%20covered

Topics Covered

security advisory moderate file access ubuntu lightdm

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  lightdm                         1.22.0-0ubuntu2.1

Ubuntu 16.10:
  lightdm                         1.19.5-0ubuntu1.2

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3285-1

CVE-2017-8900, https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1663157

Severity
important
Lowest
Low
Medium
High
Critical

May 12, 2017

Topics%20covered

Topics Covered

security advisory moderate file access ubuntu lightdm

Package Information

https://launchpad.net/ubuntu/+source/lightdm/1.22.0-0ubuntu2.1
https://launchpad.net/ubuntu/+source/lightdm/1.19.5-0ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.