Light Display Manager could be made to expose sensitive information.. =========================================================================Ubuntu Security Notice USN-1950-1 September 12, 2013 lightdm vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 13.04 Summary: Light Display Manager could be made to expose sensitive information. Software Description: - lightdm: Display Manager Details: It was discovered that Light Display Manager created .Xauthority files with incorrect permissions. A local attacker could use this flaw to bypass access restrictions. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 13.04: lightdm 1.6.0-0ubuntu3.1 After a standard system update you need to reboot your computer to make all the necessary changes. References: CVE-2013-4331 Package Information: https://launchpad.net/ubuntu/+source/lightdm/1.6.0-0ubuntu3.1 . Ubuntu Security Notice USN-2050-2 addresses a critical issue in gnome-shell. Essential patch released for affected users.. Light Display Manager Vulnerability, Local Access Issue, Ubuntu Security Update. . LinuxSecurity.com Team
Light Display Manager could be made to delete files as the administrator.. =========================================================================Ubuntu Security Notice USN-1399-2 March 13, 2012 lightdm vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 Summary: Light Display Manager could be made to delete files as the administrator. Software Description: - lightdm: Display Manager Details: Ryan Lortie discovered that a guest session script bundled in the Light Display Manager package improperly cleaned out certain guest session files. A local attacker could use this issue to delete arbitrary files. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: lightdm 1.0.6-0ubuntu1.6 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1399-2 https://ubuntu.com/security/notices/USN-1399-1 CVE-2012-0943 Package Information: https://launchpad.net/ubuntu/+source/lightdm/1.0.6-0ubuntu1.6 . The recently identified flaw in Light Display Manager enables unprivileged users to erase files on Ubuntu platforms. It's advised to apply updates for enhanced security.. Light Display Manager, Ubuntu 11.10, File Deletion. . Severity: Important. LinuxSecurity.com Team
Light Display Manager would allow unintended access to file descriptors.. =========================================================================Ubuntu Security Notice USN-1382-1 March 05, 2012 lightdm vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 Summary: Light Display Manager would allow unintended access to file descriptors. Software Description: - lightdm: Display Manager Details: Austin Clements discovered that Light Display Manager incorrectly leaked file descriptors to child processes. A local attacker can use this to bypass intended permissions and write to the log file, cause a denial of service, or possibly have another unknown impact. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: liblightdm-gobject-1-0 1.0.6-0ubuntu1.4 liblightdm-qt-1-0 1.0.6-0ubuntu1.4 lightdm 1.0.6-0ubuntu1.4 lightdm-gtk-greeter 1.0.6-0ubuntu1.4 lightdm-qt-greeter 1.0.6-0ubuntu1.4 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1382-1 https://bugs.launchpad.net/lightdm/+bug/927060 Package Information: https://launchpad.net/ubuntu/+source/lightdm/1.0.6-0ubuntu1.4 . Tackling the Display Management Flaw in Ubuntu 11.10 to avert accessibility problems and mitigate security risks.. Light Display Manager, Access Issue, Denial of Service, Security Update, Ubuntu Advisory. . LinuxSecurity.com Team
Several security issues were fixed in Light Display Manager.. =========================================================================Ubuntu Security Notice USN-1262-1 November 15, 2011 lightdm vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 Summary: Several security issues were fixed in Light Display Manager. Software Description: - lightdm: Display Manager Details: It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. (CVE-2011-3153) It was discovered that Light Display Manager incorrectly handled links when adjusting permissions on .Xauthority files. A local attacker could exploit this issue to access arbitrary files, and possibly obtain increased privileges. In the default Ubuntu installation, this would be prevented by the Yama link restrictions. (CVE-2011-4105) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: liblightdm-gobject-1-0 1.0.6-0ubuntu1.1 liblightdm-qt-1-0 1.0.6-0ubuntu1.1 lightdm 1.0.6-0ubuntu1.1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1262-1 CVE-2011-3153, CVE-2011-4105 Package Information: https://launchpad.net/ubuntu/+source/lightdm/1.0.6-0ubuntu1.1 . Numerous vulnerabilities found in the Light Display Manager necessitate urgent patches to safeguard system integrity on Ubuntu 11.10.. Light Display Manager, Ubuntu Security Fix, Local Exploit Prevention. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.