Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-688-1: Compiz vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-688-1: Compiz vulnerability
# 1  
Old 12-08-2008
USN-688-1: Compiz vulnerability
Description:
=========================================================== Ubuntu Security Notice USN-688-1 December 09, 2008 compiz-fusion-plugins-main vulnerability https://launchpad.net/bugs/247088 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 7.10 Ubuntu 8.04 LTS Ubuntu 8.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 7.10: compiz-fusion-plugins-main 0.5.2+git20070928-0ubuntu2.2 Ubuntu 8.04 LTS: compiz-fusion-plugins-main 0.7.4-0ubuntu6.2 Ubuntu 8.10: compiz-fusion-plugins-main 0.7.8-0ubuntu2.2 After a standard system upgrade you need to restart your session to effect the necessary changes. Details follow: It was discovered that the Expo plugin for Compiz did not correctly restrict the screensaver window from being moved with the mouse. A local attacker could use the mouse to move the screensaver off the screen and gain access to the locked desktop session underneath. Default installs of Ubuntu were not vulnerable as Expo does not come pre-configured with mouse bindings.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT OPENSOLARIS

fpsd

fpsd(1M)						  System Administration Commands						  fpsd(1M)

NAME

       fpsd - Fp-scrubber daemon

SYNOPSIS

       /usr/lib/fps/fpsd

DESCRIPTION

       fpsd is a user-level daemon that periodically runs non-intrusive tests to validate proper functioning of FPU (Floating Point Unit) hardware
       in the system. A fault management action is initiated by means of fmd(1M), in case an error is detected by the test.

EXIT STATUS

       The following exit values are returned:

       0

	   Successful completion.

       non-zero

	   An error occurred.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWfsu			   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Uncommitted		   |
       +-----------------------------+-----------------------------+

SEE ALSO

       svcs(1), fmd(1M), svcadm(1M), svccfg(1M), attributes(5), smf(5)

NOTES

       The fpsd service is managed by the service management facility, smf(5), under the service identifier:

	 svc:/system/fpsd:default

       You can use svccfg(1M) to change the default fpsd behavior:

	 Property Name		  Type	   Description
	 -------------		  ----	   -----------
	 config/exclude_cpus	  astring  comma delimited list of
					    CPU IDs to be excluded
					    from proactive testing.

       Administrative actions on this service, such as enabling, disabling, or requesting restart, can be performed  using  svcadm(1M).  The  ser-
       vice's status can be queried using the svcs(1) command.

       Disabling  the  service can increase system's vulnerability to silent data corruption, if a fault were to develop in an FPU within the sys-
       tem.

SunOS 5.11							    7 Aug 2008								  fpsd(1M)