(RHSA-2008:0218) Moderate: gnome-screensaver security update

2008-05-2109:59:44

access.redhat.com

EPSS

0.005

Percentile

75.9%

JSON

gnome-screensaver is the GNOME project’s official screen saver program.

A flaw was found in the way gnome-screensaver verified user passwords. When
a system used a remote directory service for login credentials, a local
attacker able to cause a network outage could cause gnome-screensaver to
crash, unlocking the screen. (CVE-2008-0887)

Users of gnome-screensaver should upgrade to this updated package, which
contains a backported patch to correct this issue.

OSVersionArchitecturePackageVersionFilename
RedHat5srcgnome-screensaver< 2.16.1-8.el5gnome-screensaver-2.16.1-8.el5.src.rpm
RedHat5ia64gnome-screensaver< 2.16.1-8.el5gnome-screensaver-2.16.1-8.el5.ia64.rpm
RedHat5i386gnome-screensaver< 2.16.1-8.el5gnome-screensaver-2.16.1-8.el5.i386.rpm
RedHat5x86_64gnome-screensaver< 2.16.1-8.el5gnome-screensaver-2.16.1-8.el5.x86_64.rpm
RedHat5s390xgnome-screensaver< 2.16.1-8.el5gnome-screensaver-2.16.1-8.el5.s390x.rpm
RedHat5ppcgnome-screensaver< 2.16.1-8.el5gnome-screensaver-2.16.1-8.el5.ppc.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	src	gnome-screensaver	< 2.16.1-8.el5	gnome-screensaver-2.16.1-8.el5.src.rpm
RedHat	5	ia64	gnome-screensaver	< 2.16.1-8.el5	gnome-screensaver-2.16.1-8.el5.ia64.rpm
RedHat	5	i386	gnome-screensaver	< 2.16.1-8.el5	gnome-screensaver-2.16.1-8.el5.i386.rpm
RedHat	5	x86_64	gnome-screensaver	< 2.16.1-8.el5	gnome-screensaver-2.16.1-8.el5.x86_64.rpm
RedHat	5	s390x	gnome-screensaver	< 2.16.1-8.el5	gnome-screensaver-2.16.1-8.el5.s390x.rpm
RedHat	5	ppc	gnome-screensaver	< 2.16.1-8.el5	gnome-screensaver-2.16.1-8.el5.ppc.rpm