xscreensaver security update

ID CESA-2007:0322-01
Type centos
Reporter CentOS Project
Modified 2007-05-03T23:03:02


CentOS Errata and Security Advisory CESA-2007:0322-01

XScreenSaver is a collection of screensavers.

Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. (CVE-2007-1859)

Users of XScreenSaver should upgrade to this updated package, which contains a backported patch to correct this issue.

Merged security bulletin from advisories: http://lists.centos.org/pipermail/centos-announce/2007-May/013718.html

Affected packages: xscreensaver

Upstream details at: https://rhn.redhat.com/errata/rh21as-errata.html