Ubuntu alert USN-1716-1 (gnome-screensaver)

From:
    	     
 
Marc Deslauriers <marc.deslauriers@canonical.com> 
To:
    	     
 
ubuntu-security-announce@lists.ubuntu.com 
Subject:
    	     
 
[USN-1716-1] gnome-screensaver vulnerability 
Date:
    	     
 
Tue, 12 Feb 2013 09:00:37 -0500
Message-ID:
    	     
 
<511A4B05.3030704@canonical.com>
Archive-link:
    	     
 
Article, Thread
              
==========================================================================
Ubuntu Security Notice USN-1716-1
February 12, 2013

gnome-screensaver vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.10

Summary:

gnome-screensaver would allow unintended access to the user session.

Software Description:
- gnome-screensaver: GNOME screen saver and locker

Details:

It was discovered that gnome-screensaver did not start automatically after
logging in. This may result in the screen not being automatically locked
after the inactivity timeout is reached, permitting an attacker with
physical access to gain access to an unlocked session.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  gnome-screensaver               3.6.0-0ubuntu2.1

After a standard system update you need to restart your session to make
all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1716-1
  CVE-2013-1050

Package Information:
  https://launchpad.net/ubuntu/+source/gnome-screensaver/3....


-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...