Stay Secure with the Latest Linux Advisories

security advisorycriticaldebian

Debian DSA-3438-1 Critical: Xscreensaver Monitor Unplug Crash Risk

It was discovered that unplugging one of the monitors in a multi-monitor setup can cause xscreensaver to crash. Someone with physical access to a machine could use this problem to bypass a locked session. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : xscreensaver CVE ID : CVE-2015-8025 Debian Bug : 802914 It was discovered that unplugging one of the monitors in a multi-monitor setup can cause xscreensaver to crash. Someone with physical access to a machine could use this problem to bypass a locked session. For the oldstable distribution (wheezy), this problem has been fixed in version 5.15-3+deb7u1. For the stable distribution (jessie), this problem has been fixed in version 5.30-1+deb8u1. For the testing (stretch) and unstable (sid) distributions, this problem has been fixed in version 5.34-1. We recommend that you upgrade your xscreensaver packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . - ------------------------------------------------------------------------- Debian Security Advisory. unplugging, monitors, multi-monitor, setup, cause, xscreensave. . Severity: Critical. LinuxSecurity.com Team

Jan 10, 2016 •Critical Debian