2016-10-26
ALT-BU-2016-3094-1
Branch t6 update bulletin.
Package xkeyboard-config updated to version 2.18-alt1 for branch t6 in task 171326.
Closed vulnerabilities
Published: 2012-01-27
BDU:2015-09444
Уязвимость операционной системы Gentoo Linux, позволяющая злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Severity: MEDIUM (4.6)
References:
Published: 2014-02-11
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2012-0064
xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.
Severity: MEDIUM (4.6)
References:
- http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/
- [xorg-announce] 20120119 xkeyboard-config 2.5
- [xorg-devel] 20120119 [PATCH SECURITY] XKB: Workaround for CVE-2012-0064: Stop calling UngrabAllDevices().
- 1026549
- http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html
- [oss-security] 20120118 Re: Screen locking programs on Xorg 1.11
- 78445
- http://www.x.org/wiki/Development/Security/
- https://bugzilla.redhat.com/show_bug.cgi?id=783039
- http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/
- https://bugzilla.redhat.com/show_bug.cgi?id=783039
- http://www.x.org/wiki/Development/Security/
- 78445
- [oss-security] 20120118 Re: Screen locking programs on Xorg 1.11
- http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html
- 1026549
- [xorg-devel] 20120119 [PATCH SECURITY] XKB: Workaround for CVE-2012-0064: Stop calling UngrabAllDevices().
- [xorg-announce] 20120119 xkeyboard-config 2.5
Closed bugs
Синтаксическая ошибка в файле /usr/share/X11/xkb/symbols/ctrl