399453 – x11-base/xorg-server-1.11.3: workaround for fix bypass screensaver/locker program

Bug 399453 - x11-base/xorg-server-1.11.3: workaround for fix bypass screensaver/locker program

Summary: x11-base/xorg-server-1.11.3: workaround for fix bypass screensaver/locker pro...

Status:	RESOLVED DUPLICATE of bug 399347

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	New packages (show other bugs)
Hardware:	All Linux

Importance:	Normal major (vote)
Assignee:	Gentoo Linux bug wranglers

URL:	http://gu1.aeroxteam.fr/2012/01/19/by...
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2012-01-20 02:26 UTC by Dmitry Suloev
Modified:	2012-01-20 02:28 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Simple patch for fix this problem (patch,1.00 KB, patch) 2012-01-20 02:26 UTC, Dmitry Suloev	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dmitry Suloev 2012-01-20 02:26:04 UTC

Recently found vulnerability allows you to bypass the screensaver

Reproducible: Always

Steps to Reproduce:
1. Lock X with screensaver/slock/alock/xlock
2. Press Ctrl+Alt+Numpad * (or Ctrl+Alt+Numpad /)
Actual Results:  
Unlock X without entering user password

Comment 1 Dmitry Suloev 2012-01-20 02:26:38 UTC

Created attachment 299353 [details, diff]
Simple patch for fix this problem

Comment 2 Chí-Thanh Christopher Nguyễn gentoo-dev

2012-01-20 02:28:07 UTC


*** This bug has been marked as a duplicate of bug 399347 ***