Date: Fri, 12 Feb 2010 14:33:29 +0100 From: Marcus Meissner <meissner@...e.de> To: OSS Security List <oss-security@...ts.openwall.com> Subject: CVE Request: KDE screensaver unlock issue similar to GNOME one Hi, Lots of our users also tested if the KDE screenlock program is affected by the "unlock by pressing return" bug. And it is. There is also a race condition and/or a memory leak which causes the lock program to terminate. https://bugzilla.novell.com/show_bug.cgi?id=579280 http://bugs.kde.org/show_bug.cgi?id=217882 http://bugs.kde.org/show_bug.cgi?id=226449 Suspend to * is not required, it also works just by pressing return. For me it takes like 5 seconds. Machine load might help. It is unclear which KDE versions are affected, reports mostly show KDE 4.4.0. Needs a different CVE than the GNOME one. Ciao, Marcus
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.