-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=lGNm
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1980-1
September 30, 2013
vino vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 13.04
- Ubuntu 12.10
- Ubuntu 12.04 LTS
Summary:
Vino could be made to hang if it received specially crafted network
traffic.
Software Description:
- vino: VNC server for GNOME
Details:
Jonathan Claudius discovered that Vino incorrectly handled closing invalid
connections. A remote attacker could use this issue to cause Vino to
consume resources, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 13.04:
vino 3.6.2-0ubuntu4.1
Ubuntu 12.10:
vino 3.6.0-0ubuntu1.2
Ubuntu 12.04 LTS:
vino 3.4.2-0ubuntu1.3
After a standard system update you need to restart your session to make all
the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1980-1
CVE-2013-5745
Package Information:
https://launchpad.net/ubuntu/+source/vino/3.6.2-0ubuntu4.1
https://launchpad.net/ubuntu/+source/vino/3.6.0-0ubuntu1.2
https://launchpad.net/ubuntu/+source/vino/3.4.2-0ubuntu1.3
No comments:
Post a Comment