(RHSA-2008:0197) Moderate: gnome-screensaver security update

2008-04-02T04:00:00
ID RHSA-2008:0197
Type redhat
Reporter RedHat
Modified 2017-09-08T11:51:34

Description

gnome-screensaver is the GNOME project's official screen saver program.

A flaw was found in the way gnome-screensaver verified user passwords. When a system used a remote directory service for login credentials, a local attacker able to cause a network outage could cause gnome-screensaver to crash, unlocking the screen. (CVE-2008-0887)

Users of gnome-screensaver should upgrade to this updated package, which contains a backported patch to correct this issue.