| Main Archive Page > Month Archives > ubuntu-security-announce archives |
[USN-1399-2] Light Display Manager vulnerability
From: Marc Deslauriers <marc.deslauriers_at_nospam>Date: Tue Mar 13 2012 - 13:49:32 GMT
To: ubuntu-security-announce@lists.ubuntu.com
==========================================================================
Ubuntu Security Notice USN-1399-2
March 13, 2012
lightdm vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 11.10
Summary:
Light Display Manager could be made to delete files as the administrator.
Software Description:
- lightdm: Display Manager
Details:
Ryan Lortie discovered that a guest session script bundled in the Light
Display Manager package improperly cleaned out certain guest session files.
A local attacker could use this issue to delete arbitrary files.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 11.10:
lightdm 1.0.6-0ubuntu1.6
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1399-2
http://www.ubuntu.com/usn/usn-1399-1
CVE-2012-0943
Package Information:
https://launchpad.net/ubuntu/+source/lightdm/1.0.6-0ubuntu1.6
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce