[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 18 Jun 2013 20:16:10 -0600
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: Florian Weimer <fweimer@...hat.com>
Subject: Re: CVE request: gnome-shell crash, screen unlock
on resume
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/18/2013 02:39 AM, Florian Weimer wrote:
> Upstream GNOME recently fixed a bug that could crash gnome-shell
> immediately after resume:
>
> https://bugzilla.gnome.org/show_bug.cgi?id=701974
>
> As noted here, the impact is that after resume, the password entry
> dialog disappears and the user is dropped into the pre-existing X
> session:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=954054
>
> I haven't figured out the exact trigger conditions, but this has
> happened to me a couple of times since switching to Fedora 19 last
> weekend. It does not appear to be a once-in-a-blue-moon bug.
>
> I think this needs to be tracked as a security bug because screen
> locking is a security feature (which is part of many security
> policies).
Please use CVE-2013-2190 for this issue.
- --
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)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=jkJk
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
