--===============7939463255826262978==
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature";
 boundary="=-tu637XrmjQjTi30MUQMS"


--=-tu637XrmjQjTi30MUQMS
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1398-1
March 12, 2012

ldm vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10
- Ubuntu 11.04

Summary:

LTSP Display Manager could be made to run programs as an administrator.

Software Description:
- ldm: LTSP display manager

Details:

Tenho Tuhkala discovered that the LTSP Display Manager (ldm) incorrectly
filtered keybindings. An attacker could use the default keybindings to
execute arbitrary commands as root at the login screen.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  ldm                             2:2.2.4-0ubuntu1.1

Ubuntu 11.04:
  ldm                             2:2.2.1-0ubuntu1.1

After a standard system update you need to restart the LTSP Display Manager
to make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1398-1
  CVE-2012-1166

Package Information:
  https://launchpad.net/ubuntu/+source/ldm/2:2.2.4-0ubuntu1.1
  https://launchpad.net/ubuntu/+source/ldm/2:2.2.1-0ubuntu1.1



--Ýu637XrmjQjTi30MUQMS
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=3MsY
-----END PGP SIGNATURE-----

--=-tu637XrmjQjTi30MUQMS--



--===============7939463255826262978==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============7939463255826262978==--