This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============4525079651387939380==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="------------enig9A7F96328041A7419155BC8F"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig9A7F96328041A7419155BC8F
Content-Type: text/plain; charset=ISO-8859-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1701-1
January 22, 2013

vino vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.10
- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 10.04 LTS

Summary:

Vino could be made to expose sensitive information over the network.

Software Description:
- vino: VNC server for GNOME

Details:

It was discovered that Vino incorrectly transmitted clipboard activity
before authenticating the remote connection. A remote attacker could
connect to Vino and monitor clipboard activity.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  vino                            3.6.0-0ubuntu1.1

Ubuntu 12.04 LTS:
  vino                            3.4.2-0ubuntu1.2

Ubuntu 11.10:
  vino                            3.2.0-0ubuntu1.2

Ubuntu 10.04 LTS:
  vino                            2.28.2-0ubuntu2.2

After a standard system update you need to restart your session to make all
the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1701-1
  CVE-2012-4429

Package Information:
  https://launchpad.net/ubuntu/+source/vino/3.6.0-0ubuntu1.1
  https://launchpad.net/ubuntu/+source/vino/3.4.2-0ubuntu1.2
  https://launchpad.net/ubuntu/+source/vino/3.2.0-0ubuntu1.2
  https://launchpad.net/ubuntu/+source/vino/2.28.2-0ubuntu2.2



--------------enig9A7F96328041A7419155BC8F
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=51jE
-----END PGP SIGNATURE-----

--------------enig9A7F96328041A7419155BC8F--


--===============4525079651387939380==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============4525079651387939380==--