Today I got some updates to Ubuntu Feisty Fawn, not a big deal, updates happen all the time. This one has me a little worried though. It's an "Important Security Update" to xscreensaver. Yeah that's right security flaws in your screensaver. Now don't get me wrong, I'm glad this is getting fixed, but a security flw in a screensaver, what is this Windows ME, agh!
Here is the info:
xscreensaver-data
data files to be shared among screensaver frontends
From version 4.24-5ubuntu2 to 4.24-5ubuntu2.1 (Size 388KB)
Version 4.24-5ubuntu2.1:
* SECURITY UPDATE: password bypass when using network authentication. * driver/lock.c: upstream fixes applied inline. * References CVE-2007-1859
xscreensaver-gl
GL(Mesa) screen hacks for xscreensaver
From version 4.24-5ubuntu2 to 4.24-5ubuntu2.1 (Size: 1.0 MB)
Version 4.24-5ubuntu2.1:
* SECURITY UPDATE: password bypass when using network authentication. * driver/lock.c: upstream fixes applied inline. * References CVE-2007-1859
THAT is scary. I wonder what the flaw was (and what it could have done)?
You're in Easy Mode. If you prefer, you can use XHTML Mode instead. |