USN-907-1: gnome-screensaver vulnerabilities

Releases

• Ubuntu 9.10
• Ubuntu 9.04
• Ubuntu 8.10

Packages

• gnome-screensaver -

Details

It was discovered that gnome-screensaver did not correctly lock all screens
when monitors get hotplugged. An attacker with physical access could use
this flaw to gain access to a locked session. (CVE-2010-0285)

It was discovered that gnome-screensaver did not correctly handle keyboard
grab when monitors get hotplugged. An attacker with physical access could
use this flaw to gain access to a locked session. This issue only affected
Ubuntu 9.10. (CVE-2010-0422)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.10

• gnome-screensaver - 2.28.0-0ubuntu3.5

Ubuntu 9.04

• gnome-screensaver - 2.24.0-0ubuntu6.1

Ubuntu 8.10

• gnome-screensaver - 2.24.0-0ubuntu2.1

After a standard system upgrade you need to restart your session to effect
the necessary changes.

References

• CVE-2010-0285
• CVE-2010-0422