desktop-packages team mailing list archive
-
desktop-packages team
-
Mailing list archive
-
Message #147231
[Bug 1512931]
Thanks for taking the time to report this bug and helping to make Ubuntu
better. Since the package referred to in this bug is in universe or
multiverse, it is community maintained. If you are able, I suggest
coordinating with upstream and posting a debdiff for this issue. When a
debdiff is available, members of the security team will review it and
publish the package. See the following link for more information:
https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to xscreensaver in Ubuntu.
https://bugs.launchpad.net/bugs/1512931
Title:
Additional Distro Versions Vuln to usn-2789-1
Status in xscreensaver package in Ubuntu:
Incomplete
Bug description:
Not sure if you're aware, but I'm able to replicate usb-2789-1 on
$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=15.04
DISTRIB_CODENAME=vivid
DISTRIB_DESCRIPTION="Ubuntu 15.04"
Current release in vivid:
||/ Name Version Architecture Description
+++-======================-================-================-=================================================
ii xscreensaver 5.30-1ubuntu1 amd64 Screensaver daemon and frontend for X11
The bug page only lists 12.04LTS as being vulnerable.
I was able to reproduce by having a dual screen (desktop) setup, and
unplugging the *secondary* (as according to display settings), whilst
the xscreensaver password unlock dialog was open.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xscreensaver/+bug/1512931/+subscriptions