Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
197
Ls Advisories Deblts Esm H240
Price Tag 1security advisorysecurity updateDebian

Debian LTS: DLA-1959-1 Critical Update for Xtrlock Screen Locking

It was discovered that multitouch devices were not being disabled by the "xtrlock" screen locking utility. xtrlock did not block multitouch events so an attacker could still . Package : xtrlock Version : 2.6+deb8u1 CVE ID : CVE-2016-10894 Debian Bug : #830726 It was discovered that multitouch devices were not being disabled by the "xtrlock" screen locking utility. xtrlock did not block multitouch events so an attacker could still input and thus control various programs such as Chromium, etc. via so-called "multitouch" events including pan scrolling, "pinch and zoom" or even being able to provide regular mouse clicks by depressing the touchpad once and then clicking with a secondary finger. For Debian 8 "Jessie", this issue has been fixed in xtrlock version 2.6+deb8u1. However, this fix does not the situation where an attacker plugs in a multitouch device *after* the screen has been locked. For more information on this, please see: We recommend that you upgrade your xtrlock packages pending a deeper fix. Regards, - -- ,'`. : :' : Chris Lamb `. `'` This email address is being protected from spambots. You need JavaScript enabled to view it. / chris-lamb.co.uk `- . Touchscreen interfaces remain accessible even when using xtrlock screen protection; it is advisable to update your system to reduce vulnerabilities against possible security breaches.. Debian Security Update, xtrlock, multitouch Device Issue, security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 14, 2019 •Critical Debian LTS
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorymoderatesecurity issue

Red Hat: RHSA-2016:1324-01 Moderate: Liberty Portal Access Control Issue

Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: clutter security update Advisory ID: RHSA-2015:1510-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:1510.html Issue date: 2015-07-27 CVE Names: CVE-2015-3213 ==================================================================== 1. Summary: Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Clutter is a library for creating fast, visually rich, graphical user interfaces. Clutter is used for rendering the GNOME desktop environment. A flaw was found in the way clutter processed certain mouse and touch gestures. An attacker could use this flaw to bypass the screen lock. (CVE-2015-3213) All clutter users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installingthe update, all applications using clutter must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1227098 - CVE-2015-3213 Gnome clutter: screenlock bypass by performing certain mouse gestures 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm ppc64: clutter-1.14.4-12.el7_1.1.ppc.rpm clutter-1.14.4-12.el7_1.1.ppc64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc64.rpm s390x: clutter-1.14.4-12.el7_1.1.s390.rpm clutter-1.14.4-12.el7_1.1.s390x.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390x.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: clutter-1.14.4-12.ael7b_1.1.src.rpm ppc64le: clutter-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-debuginfo-1.14.4-12.ael7b_1.1.ppc64le.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: clutter-debuginfo-1.14.4-12.el7_1.1.ppc.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc64.rpm clutter-devel-1.14.4-12.el7_1.1.ppc.rpm clutter-devel-1.14.4-12.el7_1.1.ppc64.rpm clutter-doc-1.14.4-12.el7_1.1.ppc64.rpm s390x: clutter-debuginfo-1.14.4-12.el7_1.1.s390.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390x.rpm clutter-devel-1.14.4-12.el7_1.1.s390.rpm clutter-devel-1.14.4-12.el7_1.1.s390x.rpm clutter-doc-1.14.4-12.el7_1.1.s390x.rpm x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64le: clutter-debuginfo-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-devel-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-doc-1.14.4-12.ael7b_1.1.ppc64le.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2015-3213 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details athttps://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVtruCXlSAg2UNWIIRAiHMAKCZuchVM3u5IGrohEOdNd+Kn+if4QCfdNNs nxrRxesii2NHWPJB9YBcaOs=mjkj -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . A significant security enhancement for Clutter in Red Hat Enterprise Linux 7 resolves an identified vulnerability that could allow unauthorized access to the screen lock feature.. Clutter Security Update, Red Hat Advisory, Screen Lock Bypass. . LinuxSecurity.com Team

Calendar 2 Jul 27, 2015 Red Hat
Banner 4 1028x280 1708121825 1771600306
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorysecurity issueRed Hat Enterprise Linux

Red Hat: RHSA-2015:1510-01 Moderate: Clutter Lock Bypass Issue

Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: clutter security update Advisory ID: RHSA-2015:1510-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:1510.html Issue date: 2015-07-27 CVE Names: CVE-2015-3213 ==================================================================== 1. Summary: Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Clutter is a library for creating fast, visually rich, graphical user interfaces. Clutter is used for rendering the GNOME desktop environment. A flaw was found in the way clutter processed certain mouse and touch gestures. An attacker could use this flaw to bypass the screen lock. (CVE-2015-3213) All clutter users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, all applications using clutter must be restarted for the update to take effect. 4. Solution: Beforeapplying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1227098 - CVE-2015-3213 Gnome clutter: screenlock bypass by performing certain mouse gestures 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm ppc64: clutter-1.14.4-12.el7_1.1.ppc.rpm clutter-1.14.4-12.el7_1.1.ppc64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc64.rpm s390x: clutter-1.14.4-12.el7_1.1.s390.rpm clutter-1.14.4-12.el7_1.1.s390x.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390x.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: clutter-1.14.4-12.ael7b_1.1.src.rpm ppc64le: clutter-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-debuginfo-1.14.4-12.ael7b_1.1.ppc64le.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: clutter-debuginfo-1.14.4-12.el7_1.1.ppc.rpm clutter-debuginfo-1.14.4-12.el7_1.1.ppc64.rpm clutter-devel-1.14.4-12.el7_1.1.ppc.rpm clutter-devel-1.14.4-12.el7_1.1.ppc64.rpm clutter-doc-1.14.4-12.el7_1.1.ppc64.rpm s390x: clutter-debuginfo-1.14.4-12.el7_1.1.s390.rpm clutter-debuginfo-1.14.4-12.el7_1.1.s390x.rpm clutter-devel-1.14.4-12.el7_1.1.s390.rpm clutter-devel-1.14.4-12.el7_1.1.s390x.rpm clutter-doc-1.14.4-12.el7_1.1.s390x.rpm x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64le: clutter-debuginfo-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-devel-1.14.4-12.ael7b_1.1.ppc64le.rpm clutter-doc-1.14.4-12.ael7b_1.1.ppc64le.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: clutter-1.14.4-12.el7_1.1.src.rpm x86_64: clutter-1.14.4-12.el7_1.1.i686.rpm clutter-1.14.4-12.el7_1.1.x86_64.rpm clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: clutter-debuginfo-1.14.4-12.el7_1.1.i686.rpm clutter-debuginfo-1.14.4-12.el7_1.1.x86_64.rpm clutter-devel-1.14.4-12.el7_1.1.i686.rpm clutter-devel-1.14.4-12.el7_1.1.x86_64.rpm clutter-doc-1.14.4-12.el7_1.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2015-3213 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details athttps://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. . New clutter updates launched for Red Hat to mitigate a moderate security vulnerability affecting the screen locking feature.. Clutter Security Update, Red Hat Advisory, Moderate Security Risk. . LinuxSecurity.com Team

Calendar 2 Jul 27, 2015 Red Hat
91
Ls Advisories Gentoo Esm H240
Price Tag 1security advisorygentooaccess control

Gentoo: 201201-16 Normal: X.Org Screen Lock Bypass Threat

A debugging functionality in the X.Org X Server that is bound to a hotkey by default can be used by local attackers to circumvent screen locking utilities. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201201-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: X.Org X Server/X Keyboard Configuration Database: Screen lock bypass Date: January 27, 2012 Bugs: #399347 ID: 201201-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A debugging functionality in the X.Org X Server that is bound to a hotkey by default can be used by local attackers to circumvent screen locking utilities. Background ========= The X Keyboard Configuration Database provides keyboard configuration for various X server implementations. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 x11-misc/xkeyboard-config < 2.4.1-r3 > = 2.4.1-r3 ------------------------------------------------------------------- # Package 1 only applies to users of these architectures: amd64, arm, hppa, x86 Description ========== Starting with the =x11-base/xorg-server-1.11 package, the X.Org X Server again provides debugging functionality that can be used terminate an application that exclusively grabs mouse and keyboard input, like screen locking utilities. Gu1 reported that the X Keyboard Configuration Database maps this functionality by default to the Ctrl+Alt+Numpad * key combination. Impact ===== A physically proximate attacker couldexploit this vulnerability to gain access to a locked X session without providing the correct credentials. Workaround ========= Downgrade to any version of x11-base/xorg-server below x11-base/xorg-server-1.11: # emerge --oneshot --verbose " =x11-misc/xkeyboard-config-2.4.1-r3" NOTE: The X.Org X Server 1.11 was only stable on the AMD64, ARM, HPPA, and x86 architectures. Users of the stable branches of all other architectures are not affected and will be directly provided with a fixed X Keyboard Configuration Database version. References ========= [ 1 ] CVE-2012-0064 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0064 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201201-16 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2012 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . X.Org X Server notice regarding shortcut vulnerability, allowing unapproved entry to secured screens. Risk Level: Moderate.. Screen Lock Bypass,Gentoo Advisory,Keyboard Security,Access Control Threats. . LinuxSecurity.com Team

Calendar 2 Jan 27, 2012 Gentoo
Banner 4 1028x280 1708121825 1771600306
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorycriticalubuntu

Ubuntu 7.10 USN-537-2 Critical: Compiz Screen Lock Bypass Issue

USN-537-1 fixed vulnerabilities in gnome-screensaver. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes related problems in compiz. Original advisory details: Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard lock focus. A local attacker could exploit this to bypass the user's locked screen saver. . =========================================================== Ubuntu Security Notice USN-537-2 November 02, 2007 compiz vulnerability CVE-2007-3920 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 7.10: compiz-core 1:0.6.0+git20071008-0ubuntu1.1 After a standard system upgrade you need to restart your session to affect the necessary changes. Details follow: USN-537-1 fixed vulnerabilities in gnome-screensaver. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes related problems in compiz. Original advisory details: Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard lock focus. A local attacker could exploit this to bypass the user's locked screen saver. Updated packages for Ubuntu 7.10: Source archives: Size/MD5: 29827 b2550efe55c1d8a18ad4e284a28ca899 Size/MD5: 1649 ab43c9b6f0e98efc838ef255845b31d2 Size/MD5: 1761080 cf9ec6ee88b5a013dc45615623edd290 Architecture independent packages: Size/MD5: 31690 e2130dea26860c0cdd440b06cbe22b4b amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 201614d38d37f17a435644c66b3bc2b67ba104 Size/MD5: 58896 13827f47ed327985c0110f3f67091fa2 Size/MD5: 176974 afbd3384a12ea27248c396658439dd84 Size/MD5: 312020 85f424b01fbf6bf569c1afe10a2498be Size/MD5: 38016 43e78f6795a87b16284ea01f04573096 Size/MD5: 49518 6918b584bd2efbf2c4498de545df9d64 Size/MD5: 93440 c390c04d0287cf8d59214726dd7b6df4 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 190670 2c69c223dd7b01af92ba9d678b7d6989 Size/MD5: 58894 5b030fbf593ae76b87db4df78736b204 Size/MD5: 171552 f5afdabd90ce1831e17dd459694bceaf Size/MD5: 280358 944e6ada5dd20be6606c12c51c24e115 Size/MD5: 38026 36099c55061121c8fc191bb7bdc0cc8e Size/MD5: 48524 c86d2f45c4180ca1f703f1602e0d99be Size/MD5: 90958 7497eb8e31d7122098853257926f5c34 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 203886 208e61976da728651b5d1b08270862e6 Size/MD5: 58902 47254a78f893dad736cedcceaa6f76a1 Size/MD5: 183612 39f85e66846c8957127a3cb4f78e18a0 Size/MD5: 354288 de6eef139f5c20961492d24f885cb0c2 Size/MD5: 38032 6c201be7b5ed09deaae4d23eaf1f5426 Size/MD5: 52486 3050c0a20a5f3cf12fdc975649990550 Size/MD5: 98442 6784da37baf410d28c115de33cab9530 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 193342 edaa5df12a5f7a2e01ab55d5667091d7 Size/MD5: 58898 af66b1370f0a7cc427bfbd356a0ebbf3 Size/MD5: 174396 cda564a42b5b8112b174b76f6ef92997 Size/MD5: 291648 dd15868aa72301182b2dbf80fde35ba8 Size/MD5: 38028 cc1ba35b84bc29e8c4096ad50dace8e7 Size/MD5: 47442 d5ad12579bcd525751523d78d3b2497f Size/MD5: 90678 f491b2bdc46acd486db7049c1e575673 --OJnKAutO47z+s2LZ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition:inline -----BEGIN PGP SIGNATURE-----Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHK0NhH/9LqRcGPm0RAkRtAKCKc5TlE3sm65kLLNXKo36GlUtxkwCePCvI EupRShiwLBDaRDnCs2TwR1A . Ubuntu Security Notice USN-537-2 November 02, 2007 compiz vulnerability CVE-2007-3920 A security iss. usn-537-1, vulnerabilities, gnome-screensaver, fixes, incomplete, reduced. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 02, 2007 •Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here