Re: [SECURITY] [DSA 3438-1] xscreensaver security update

Path	csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From	David Cachau <safranil@safranil.fr>
Newsgroups	linux.debian.security
Subject	Re: [SECURITY] [DSA 3438-1] xscreensaver security update
Date	Mon, 11 Jan 2016 01:00:03 +0100
Message-ID	<qPy3V-2Gd-15@gated-at.bofh.it> (permalink)
References	<qPtxg-8hk-11@gated-at.bofh.it> <qPxAS-2uO-7@gated-at.bofh.it>
X-Original-To	David ISIDORE <isidoredavid@gmail.com>, debian-security@lists.debian.org
X-Mailbox-Line	From debian-security-request@lists.debian.org Sun Jan 10 23:57:09 2016
Old-Return-Path	<safranil@safranil.fr>
X-Amavis-Spam-Status	No, score=-0.101 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RP_MATCHES_RCVD=-0.001] autolearn=no autolearn_force=no
X-Policyd-Weight	using cached result; rate: -6.1
X-Greylist	delayed 584 seconds by postgrey-1.35 at bendel; Sun, 10 Jan 2016 23:39:05 UTC
Dkim-Filter	OpenDKIM Filter v2.9.2 mail.safranil.fr 04CD6255A7A7
Dkim-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=safranil.fr; s=D0F0CE62-AFC2-11E4-B732-89BF0A421036; t=1452468558; bh=13N0Rg6ImLMtTBJjs6oZdN3nY1rnlTnCmeCy8oBSeoo=; h=Subject:To:From:Message-ID:Date:MIME-Version:Content-Type; b=Co82ygAKb2vTvLTd1fr+rzEH+d5jLVzeFaUEerptDX34V+bmDDZ2M6lyzVruJodh0 dSjLePFUh+2HyodTf0yeX1EWOG5ohRj65DeMRAvZaB95VpGe4hshrgKebyeEq27Y8/ WuCk9joQfAnOfiYbNpjqpFAAj41H0nc7tlT+SWS4=
User-Agent	Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0
MIME-Version	1.0
Content-Type	multipart/alternative; boundary="------------040403080300080802030600"
X-Mailing-List	<debian-security@lists.debian.org> archive/latest/27497
List-ID	<debian-security.lists.debian.org>
List-URL	<https://lists.debian.org/debian-security/>
List-Archive	https://lists.debian.org/msgid-search/5692EA03.1050308@safranil.fr
Approved	robomod@news.nic.it
Lines	157
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Mon, 11 Jan 2016 00:32:19 +0100
X-Original-Message-ID	<5692EA03.1050308@safranil.fr>
X-Original-References	<E1aILLw-0001lx-3d@alpha.psidef.org> <CAEvLMhhSVmHoL1+VU-wo0rSPUE_ht=uGC1Bc=3+4CO6deQgB4A@mail.gmail.com>
Xref	csiph.com linux.debian.security:4461

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Hello,

You can follow instructions on this URL:
https://www.debian.org/MailingLists/#subunsub
Or use this form : https://www.debian.org/MailingLists/unsubscribe

Good bye

Le 11/01/2016 00:04, David ISIDORE a écrit :
> Hi, I'm not on Debian anymore. How can I unsubscribe from mailing list? > > 2016-01-10 20:08 GMT+01:00 Michael Gilbert <mgilbert@debian.org
<mailto:mgilbert@debian.org>>: >
> -------------------------------------------------------------------------
> Debian Security Advisory DSA-3438-1                  
> security@debian.org <mailto:security@debian.org>
> https://www.debian.org/security/                          Michael Gilbert
> January 09, 2016                      https://www.debian.org/security/faq
> -------------------------------------------------------------------------
>
> Package        : xscreensaver
> CVE ID         : CVE-2015-8025
> Debian Bug     : 802914
>
> It was discovered that unplugging one of the monitors in a multi-monitor
> setup can cause xscreensaver to crash.  Someone with physical access to
> a machine could use this problem to bypass a locked session.
>
> For the oldstable distribution (wheezy), this problem has been fixed
> in version 5.15-3+deb7u1.
>
> For the stable distribution (jessie), this problem has been fixed in
> version 5.30-1+deb8u1.
>
> For the testing (stretch) and unstable (sid) distributions, this problem
> has been fixed in version 5.34-1.
>
> We recommend that you upgrade your xscreensaver packages.
>
> Further information about Debian Security Advisories, how to apply
> these updates to your system and frequently asked questions can be
> found at: https://www.debian.org/security/
>
> Mailing list: debian-security-announce@lists.debian.org
> <mailto:debian-security-announce@lists.debian.org>
> >

Thread

Re: [SECURITY] [DSA 3438-1] xscreensaver security update David ISIDORE <isidoredavid@gmail.com> - 2016-01-11 00:30 +0100
  Re: [SECURITY] [DSA 3438-1] xscreensaver security update David Cachau <safranil@safranil.fr> - 2016-01-11 01:00 +0100
  Re: [SECURITY] [DSA 3438-1] xscreensaver security update "contact@baal.fr" <contact@baal.fr> - 2016-01-11 01:10 +0100
    Re: [SECURITY] [DSA 3438-1] xscreensaver security update Dominique Martinet <asmadeus@codewreck.org> - 2016-01-11 09:20 +0100
      Re: [SECURITY] [DSA 3438-1] xscreensaver security update Povl Ole Haarlev Olsen <debian-security@stderr.dk> - 2016-01-11 10:30 +0100
        Re: [SECURITY] [DSA 3438-1] xscreensaver security update Cindy-Sue Causey <butterflybytes@gmail.com> - 2016-01-11 17:20 +0100
          Re: [SECURITY] [DSA 3438-1] xscreensaver security update Noah Meyerhans <noahm@debian.org> - 2016-01-11 18:20 +0100
            Re: [SECURITY] [DSA 3438-1] xscreensaver security update Cindy-Sue Causey <butterflybytes@gmail.com> - 2016-01-13 14:30 +0100

csiph-web