Login
Newsletter
Werbung

Sicherheit: Mangelnde Rechteprüfung in lightdm
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in lightdm
ID: USN-1382-1
Distribution: Ubuntu
Plattformen: Ubuntu 11.10
Datum: Mo, 5. März 2012, 16:46
Referenzen: Keine Angabe
Applikationen: LightDM

Originalnachricht


--===============8315683911966491551==
Content-Type: multipart/signed; micalg="pgp-sha512";
protocol="application/pgp-signature";
boundary="=-CuHfEjogGclccI4FiqXE"


--=-CuHfEjogGclccI4FiqXE
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1382-1
March 05, 2012

lightdm vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10

Summary:

Light Display Manager would allow unintended access to file descriptors.

Software Description:
- lightdm: Display Manager

Details:

Austin Clements discovered that Light Display Manager incorrectly leaked
file descriptors to child processes. A local attacker can use this to
bypass intended permissions and write to the log file, cause a denial of
service, or possibly have another unknown impact.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
liblightdm-gobject-1-0 1.0.6-0ubuntu1.4
liblightdm-qt-1-0 1.0.6-0ubuntu1.4
lightdm 1.0.6-0ubuntu1.4
lightdm-gtk-greeter 1.0.6-0ubuntu1.4
lightdm-qt-greeter 1.0.6-0ubuntu1.4

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1382-1
https://launchpad.net/bugs/927060

Package Information:
https://launchpad.net/ubuntu/+source/lightdm/1.0.6-0ubuntu1.4



--ÜuHfEjogGclccI4FiqXE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAABCgAGBQJPVMohAAoJEGVp2FWnRL6TiPUP/RXTJRuDNfM/F23G6FweiWNx
/AbWDMaNxZHZFexyBBuaQfcW+1CnwjJL3VbfV+cYFKKb/x60khh0Zv20UDtXRLcY
xIpGki6keVKmrvef4GP60QsVIUvv/nLRoG01W6uyRAw6gDxKPhE4bd7+7rMwfp1d
TkmMKOqzT6S7IAkLouHS6bqkI52uLY9D2TZRzXfGGVUY1VtcfkTerLDjwCNpzWxm
vRfa8h0/26jqURejpGxqo/cG5Q0Iy1UUNDqPEr7jrBv+AZpkQCX+nCH0vOt1A2NO
wQWdWKP5Vp6VgG6+kXfCQ9QdkP7ai2TpZ5201IDGZQILSPZEA5Y16/9972qGQg3y
aXCYPYa4Rd7lSdzS5RdlEo9h/mX8clSX7sT9xs6Ebm9MF1iokJ0qxSzzfr++Ik0t
/eXzutWyfulJdCfN3R2/QJByWzxdhqm4tg9daSgj5+uOprS4NyNunu42NVGok0n5
OQpBRytE2KPJn6RwD7caSAXBY2p9BhacTac76nf93HL5OvOtDw/4Hovo1/yoL37G
8Sd5NGVufuYSxP1K8+UlItqL/VzUXaiESE8CYvQ7Jsox/95gwekGXWBE6fstb9/V
Ol31hWLUIs9/ImXNJXA5bNB9HSYJE5LJuQrvtoehDeaZuqxWzx/yCsK/LZHmGUQV
SrmxuaLjMWxQNw5CAsys
=Y5mG
-----END PGP SIGNATURE-----

--=-CuHfEjogGclccI4FiqXE--



--===============8315683911966491551==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============8315683911966491551==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung