Stay Secure with the Latest Linux Advisories

security advisorysecurity updateDebian

Debian LTS: DLA-1959-1 Critical Update for Xtrlock Screen Locking

It was discovered that multitouch devices were not being disabled by the "xtrlock" screen locking utility. xtrlock did not block multitouch events so an attacker could still . Package : xtrlock Version : 2.6+deb8u1 CVE ID : CVE-2016-10894 Debian Bug : #830726 It was discovered that multitouch devices were not being disabled by the "xtrlock" screen locking utility. xtrlock did not block multitouch events so an attacker could still input and thus control various programs such as Chromium, etc. via so-called "multitouch" events including pan scrolling, "pinch and zoom" or even being able to provide regular mouse clicks by depressing the touchpad once and then clicking with a secondary finger. For Debian 8 "Jessie", this issue has been fixed in xtrlock version 2.6+deb8u1. However, this fix does not the situation where an attacker plugs in a multitouch device *after* the screen has been locked. For more information on this, please see: We recommend that you upgrade your xtrlock packages pending a deeper fix. Regards, - -- ,'`. : :' : Chris Lamb `. `'` This email address is being protected from spambots. You need JavaScript enabled to view it. / chris-lamb.co.uk `- . Touchscreen interfaces remain accessible even when using xtrlock screen protection; it is advisable to update your system to reduce vulnerabilities against possible security breaches.. Debian Security Update, xtrlock, multitouch Device Issue, security advisory. . Severity: Critical. LinuxSecurity.com Team

Oct 14, 2019 •Critical Debian LTS