lightdm weak permissions

.Xauthority files weak permissions...

Fedora 18 : lightdm-1.4.3-1.fc18 (2013-16381)

This is a stable update in the 1.4 series adding a few important fixes backported from later versions. Overview of changes in lightdm 1.4.2 include : - Correctly set permissions on Xauthority file. - Stop using gfilesetreplace - it can leave intermediate files around See also:...

[SECURITY] Fedora 20 Update: lightdm-1.7.15-1.fc20

LightDM is an X display manager that: Has a lightweight codebase Is standards compliant PAM, ConsoleKit, etc Has a well defined interface between the server and user interface Fully themeable easiest with the webkit interface Cross-desktop greeters can be written in any toolkit...

Fedora 20 : lightdm-1.7.15-1.fc20 (2013-16293)

New upstream bugfix release : - Correctly set permissions on Xauthority file. - Correctly set $XDGCURRENTDESKTOP for non-autologin sessions - Fix overallocation of array for strings from greeter. - Set XDGVTNR=1 as a fallback if using SeatUnity without a functioning compositor or working VT...

MGASA-2013-0286 Updated lightdm package fixes security vulnerability

lightdm before 1.4.3, 1.6.2 and 1.7.14 created .Xauthority files with world-readable permissions CVE-2013-4331. Additionally, an issue where a user logged into a graphical desktop environment through lightdm would lose privleges to local devices such as the sound card when using the 'su' command...

Updated lightdm package fixes security vulnerability

lightdm before 1.4.3, 1.6.2 and 1.7.14 created .Xauthority files with world-readable permissions CVE-2013-4331. Additionally, an issue where a user logged into a graphical desktop environment through lightdm would lose privleges to local devices such as the sound card when using the 'su' command...

PT-2014-2774

Name of the Vulnerable Software and Affected Versions Light Display Manager aka LightDM versions 1.4.x through 1.4.2 Light Display Manager aka LightDM versions 1.6.x through 1.6.1 Light Display Manager aka LightDM versions 1.7.x through 1.7.13 Description The issue allows local users to obtain...

Ubuntu Update for lightdm USN-1950-1

Check for the Version of lightdm OpenVAS Vulnerability Test $Id: gbubuntuUSN19501.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for lightdm USN-1950-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

Fedora Update for lightdm FEDORA-2013-16388

Check for the Version of lightdm OpenVAS Vulnerability Test Fedora Update for lightdm FEDORA-2013-16388 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu: Security Advisory (USN-1950-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for lightdm FEDORA-2013-16388

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: lightdm-1.6.2-1.fc19

LightDM is an X display manager that: Has a lightweight codebase Is standards compliant PAM, ConsoleKit, etc Has a well defined interface between the server and user interface Fully themeable easiest with the webkit interface Cross-desktop greeters can be written in any toolkit...

Fedora 19 : lightdm-1.6.2-1.fc19 (2013-16388)

New stable bugfix, security release: include : - Correctly set permissions on Xauthority file. - Fix bug where seat failure before D-Bus acquired would not stop daemon - Stop using gfilesetcontents - it can leave intermediate files around See also:...

CVE-2013-4331

Light Display Manager aka LightDM 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file...

Ubuntu Update for lightdm USN-1382-1

Ubuntu Update for Linux kernel vulnerabilities USN-1382-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13821.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for lightdm USN-1382-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for lightdm USN-1399-2

Ubuntu Update for Linux kernel vulnerabilities USN-1399-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN13992.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for lightdm USN-1399-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for lightdm USN-1262-1

Ubuntu Update for Linux kernel vulnerabilities USN-1262-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12621.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for lightdm USN-1262-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1262-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1399-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1382-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...