2014-04-04
ALT-BU-2014-2686-1
Branch sisyphus update bulletin.
Closed bugs
without lcms2
Closed bugs
without lcms2
Closed bugs
without lcms2
Closed vulnerabilities
Published: 2015-01-16
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2014-1949
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.
Severity: HIGH (7.2)
References:
- http://advisories.mageia.org/MGASA-2014-0374.html
- http://advisories.mageia.org/MGASA-2014-0374.html
- [oss-security] 20140212 cinnamon-screensaver lock bypass (tested on Fedora 20)
- [oss-security] 20140212 cinnamon-screensaver lock bypass (tested on Fedora 20)
- [oss-security] 20140212 Re: cinnamon-screensaver lock bypass (tested on Fedora 20)
- [oss-security] 20140212 Re: cinnamon-screensaver lock bypass (tested on Fedora 20)
- MDVSA-2015:162
- MDVSA-2015:162
- USN-2475-1
- USN-2475-1
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759145
- https://bugzilla.redhat.com/show_bug.cgi?id=1064695
- https://bugzilla.redhat.com/show_bug.cgi?id=1064695
- https://github.com/linuxmint/cinnamon-screensaver/issues/44
- https://github.com/linuxmint/cinnamon-screensaver/issues/44