Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:2053-2

Опубликовано: 29 дек. 2015
Источник: suse-cvrf

Описание

Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue:

  • CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked (bsc#952062).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
xscreensaver-5.22-7.1
xscreensaver-data-5.22-7.1
SUSE Linux Enterprise Server 12 SP1
xscreensaver-5.22-7.1
xscreensaver-data-5.22-7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
xscreensaver-5.22-7.1
xscreensaver-data-5.22-7.1

Ссылки

Описание

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:xscreensaver-5.22-7.1
SUSE Linux Enterprise Desktop 12 SP1:xscreensaver-data-5.22-7.1
SUSE Linux Enterprise Server 12 SP1:xscreensaver-5.22-7.1
SUSE Linux Enterprise Server 12 SP1:xscreensaver-data-5.22-7.1
Ссылки