Responses To The Linux Desktop Security Problem

[AJenbo]

Similare bug in Ubuntu 11.10

I just reported a similare bug found in Ubuntu (only tested Ubuntu 11.10). This one is probably related to LightDM. I wount disclose it untill some one has had time to find out where it steams from though.

[FourDMusic]

My bad, it's upstream in xkeyboard-config, not the xserver.

So, if I rebuild the xorg xkeyboard-config/ module from git, should it remove the security problem?

[fewt]

Fix is in Fuduntu Testing, should be in stable by morning.

[mlundbladad]

Also fixed in Debian unstable.

[ncopa]

Alpine Linux fixed

Fix for Alpine Linux just pushed

[tux9656]

Fixed in all Debian branches except wheeze.

http://security-tracker.debian.org/tracker/CVE-2012-0064

[tux9656]

Seems to be fixed now in all Debian branches except wheeze.

http://security-tracker.debian.org/tracker/CVE-2012-0064

[curaga]

My bad, it's upstream in xkeyboard-config, not the xserver.

[curaga]

Distro responses aside, it is still not reverted upstream (!).

[ChrisXY]

And as I said, neither does it affect Archlinux users "right now" given they have an up to date system:

http://phoronix.com/forums/showthread.php?68307-An-Easy-But-Serious-Screensaver-Security-Problem-In-X-Org&p=247424#post247424