Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:2054-1

Опубликовано: 20 нояб. 2015
Источник: suse-cvrf

Описание

Security update for xscreensaver

The xscreensaver package was updated to fix the following security and non security issues:

  • CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked (bsc#952062).
  • Added xscreensaver-in_signal_handler_p.patch needed for fix of signal handling.
  • Refresh xscreensaver-stars.patch.

Список пакетов

SUSE Linux Enterprise Desktop 11 SP3
xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Desktop 11 SP4
xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Server 11 SP3
xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Server 11 SP4
xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3
xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
xscreensaver-5.07-6.36.1

Ссылки

Описание

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP3:xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Desktop 11 SP4:xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Server 11 SP3-TERADATA:xscreensaver-5.07-6.36.1
SUSE Linux Enterprise Server 11 SP3:xscreensaver-5.07-6.36.1
Ссылки