Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2641-1

Опубликовано: 03 авг. 2022
Источник: suse-cvrf

Описание

Security update for xscreensaver

This update for xscreensaver fixes the following issues:

  • CVE-2021-34557: Fixed potential crash and unlock while disconnecting video output with more than 10 monitors (bsc#1186918)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP3
xscreensaver-5.44-150000.5.6.1
xscreensaver-data-5.44-150000.5.6.1
xscreensaver-lang-5.44-150000.5.6.1
openSUSE Leap 15.3
xscreensaver-5.44-150000.5.6.1
xscreensaver-data-5.44-150000.5.6.1
xscreensaver-data-extra-5.44-150000.5.6.1
xscreensaver-lang-5.44-150000.5.6.1

Ссылки

Описание

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video outputs.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP3:xscreensaver-5.44-150000.5.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP3:xscreensaver-data-5.44-150000.5.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP3:xscreensaver-lang-5.44-150000.5.6.1
openSUSE Leap 15.3:xscreensaver-5.44-150000.5.6.1
Ссылки