You are here
Home > Preporuke > Sigrnosni propusti programskog paketa lxdm

Sigrnosni propusti programskog paketa lxdm

  • Detalji os-a: FED
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-adbae85c55
2015-10-17 18:39:17.814103
——————————————————————————–

Name : lxdm
Product : Fedora 22
Version : 0.4.1
Release : 10.fc22
URL : http://lxde.org
Summary : Lightweight X11 Display Manager
Description :
LXDM is the future display manager of LXDE, the Lightweight X11 Desktop
environment. It is designed as a lightweight alternative to replace GDM or
KDM in LXDE distros. It’s still in very early stage of development.

——————————————————————————–
Update Information:

It is found that lxdm does not close file descriptor for log file althouhg it
should. Also session started via lxdm can allow any local user to connect X.
This new rpm should fix these issues.
——————————————————————————–
References:

[ 1 ] Bug #1268900 – lxdm: X server started without -auth, exposing it to connections form any local user
https://bugzilla.redhat.com/show_bug.cgi?id=1268900
[ 2 ] Bug #846086 – lxdm: leaks file descriptors
https://bugzilla.redhat.com/show_bug.cgi?id=846086
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update lxdm’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-7766c0d939
2015-10-17 18:38:33.330509
——————————————————————————–

Name : lxdm
Product : Fedora 21
Version : 0.4.1
Release : 10.fc21
URL : http://lxde.org
Summary : Lightweight X11 Display Manager
Description :
LXDM is the future display manager of LXDE, the Lightweight X11 Desktop
environment. It is designed as a lightweight alternative to replace GDM or
KDM in LXDE distros. It’s still in very early stage of development.

——————————————————————————–
Update Information:

It is found that lxdm does not close file descriptor for log file althouhg it
should. Also session started via lxdm can allow any local user to connect X.
This new rpm should fix these issues.
——————————————————————————–
References:

[ 1 ] Bug #1268900 – lxdm: X server started without -auth, exposing it to connections form any local user
https://bugzilla.redhat.com/show_bug.cgi?id=1268900
[ 2 ] Bug #846086 – lxdm: leaks file descriptors
https://bugzilla.redhat.com/show_bug.cgi?id=846086
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update lxdm’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorTomislav Protega
Cert idNCERT-REF-2015-10-0014-ADV
ID izvornikaFEDORA-2015-7766
Proizvodlxdm
Izvorhttp://www.redhat.com
Top
More in Preporuke
Ranjivost programskog paketa openstack-nova

Otkrivene su dvije ranjivosti u programskom paketu openstack-nova za RHEL OpenStack Platform 5.0, 6.0 i 7.0. Prva ranjivost očitovala se...

Close