Moderate: clutter security update. Date: Tue, 28 Jul 2015 14:31:38 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: clutter on SL7.x x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Moderate: clutter security update Advisory ID: SLSA-2015:1510-1 Issue Date: 2015-07-27 CVE Numbers: CVE-2015-3213 -- A flaw was found in the way clutter processed certain mouse and touch gestures. An attacker could use this flaw to bypass the screen lock. (CVE-2015-3213) After installing the update, all applications using clutter must be restarted for the update to take effect. -- SL7 x86_64 clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm - Scientific Linux Development Team . A key security patch for Scientific Linux tackles a usability issue that permitted unauthorized access to the locked screen. See full report.. Clutter Security Update, Scientific Linux 7, Linux Security Advisory. . LinuxSecurity.com Team
Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: clutter security update Advisory ID: RHSA-2015:1510-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:1510.html Issue date: 2015-07-27 CVE Names: CVE-2015-3213 ==================================================================== 1. Summary: Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Clutter is a library for creating fast, visually rich, graphical user interfaces. Clutter is used for rendering the GNOME desktop environment. A flaw was found in the way clutter processed certain mouse and touch gestures. An attacker could use this flaw to bypass the screen lock. (CVE-2015-3213) All clutter users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installingthe update, all applications using clutter must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1227098 - CVE-2015-3213 Gnome clutter: screenlock bypass by performing certain mouse gestures 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm ppc64: clutter-1.14.4-12.el7_1.1.ppc.rpm clutter-1.14.4-12.el7_1.1.ppc64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc64.rpm s390x: clutter-1.14.4-12.el7_1.1.s390.rpm clutter-1.14.4-12.el7_1.1.s390x.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390x.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: clutter-1.14.4-12.ael7b_1.1.src.rpm ppc64le: clutter-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-debuginfo-1.14.4-12.ael7b_1.1.ppc64le.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: clutter-debuginfo-1.14.4-12.el7_1.1.ppc.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc64.rpm clutter-devel-1.14.4-12.el7_1.1.ppc.rpm clutter-devel-1.14.4-12.el7_1.1.ppc64.rpm clutter-doc-1.14.4-12.el7_1.1.ppc64.rpm s390x: clutter-debuginfo-1.14.4-12.el7_1.1.s390.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390x.rpm clutter-devel-1.14.4-12.el7_1.1.s390.rpm clutter-devel-1.14.4-12.el7_1.1.s390x.rpm clutter-doc-1.14.4-12.el7_1.1.s390x.rpm x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64le: clutter-debuginfo-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-devel-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-doc-1.14.4-12.ael7b_1.1.ppc64le.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2015-3213 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details athttps://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVtruCXlSAg2UNWIIRAiHMAKCZuchVM3u5IGrohEOdNd+Kn+if4QCfdNNs nxrRxesii2NHWPJB9YBcaOs=mjkj -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: clutter security update Advisory ID: RHSA-2015:1510-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:1510.html Issue date: 2015-07-27 CVE Names: CVE-2015-3213 ==================================================================== 1. Summary: Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Clutter is a library for creating fast, visually rich, graphical user interfaces. Clutter is used for rendering the GNOME desktop environment. A flaw was found in the way clutter processed certain mouse and touch gestures. An attacker could use this flaw to bypass the screen lock. (CVE-2015-3213) All clutter users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, all applications using clutter must be restarted for the update to take effect. 4. Solution: Beforeapplying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1227098 - CVE-2015-3213 Gnome clutter: screenlock bypass by performing certain mouse gestures 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm ppc64: clutter-1.14.4-12.el7_1.1.ppc.rpm clutter-1.14.4-12.el7_1.1.ppc64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc64.rpm s390x: clutter-1.14.4-12.el7_1.1.s390.rpm clutter-1.14.4-12.el7_1.1.s390x.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390x.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: clutter-1.14.4-12.ael7b_1.1.src.rpm ppc64le: clutter-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-debuginfo-1.14.4-12.ael7b_1.1.ppc64le.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: clutter-debuginfo-1.14.4-12.el7_1.1.ppc.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc64.rpm clutter-devel-1.14.4-12.el7_1.1.ppc.rpm clutter-devel-1.14.4-12.el7_1.1.ppc64.rpm clutter-doc-1.14.4-12.el7_1.1.ppc64.rpm s390x: clutter-debuginfo-1.14.4-12.el7_1.1.s390.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390x.rpm clutter-devel-1.14.4-12.el7_1.1.s390.rpm clutter-devel-1.14.4-12.el7_1.1.s390x.rpm clutter-doc-1.14.4-12.el7_1.1.s390x.rpm x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64le: clutter-debuginfo-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-devel-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-doc-1.14.4-12.ael7b_1.1.ppc64le.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2015-3213 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details athttps://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. . New clutter updates launched for Red Hat to mitigate a moderate security vulnerability affecting the screen locking feature.. Clutter Security Update, Red Hat Advisory, Moderate Security Risk. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.