Is it a security breach?

Tiago Cogumbreiro cogumbreiro at gmail.com
Mon Oct 10 09:57:05 CDT 2005


You guys found it out, by checking synaptics logs I can see that it
updated xscreensaver. I will file an enhancement bug then.

The installed packages follow:

irssi-text (0.8.9+0.8.10rc5-0ubuntu3) to 0.8.9+0.8.10rc5-0ubuntu4
libc6 (2.3.5-1ubuntu11) to 2.3.5-1ubuntu12
libc6-dev (2.3.5-1ubuntu11) to 2.3.5-1ubuntu12
libc6-i686 (2.3.5-1ubuntu11) to 2.3.5-1ubuntu12
libfaad2-0 (2.0.0+cvs20040908+mp4v2+bmp-0ubuntu1) to
2.0.0+cvs20040908+mp4v2+bmp-0ubuntu2
libgconf2.0-cil (2.3.91-0ubuntu4) to 2.3.92-0ubuntu1
libglade2.0-cil (2.3.91-0ubuntu4) to 2.3.92-0ubuntu1
libglib2.0-cil (2.3.91-0ubuntu4) to 2.3.92-0ubuntu1
libgnome2.0-cil (2.3.91-0ubuntu4) to 2.3.92-0ubuntu1
libgtk2.0-cil (2.3.91-0ubuntu4) to 2.3.92-0ubuntu1
libpoppler0c2 (0.4.2-0ubuntu5) to 0.4.2-0ubuntu6
libpoppler0c2-glib (0.4.2-0ubuntu5) to 0.4.2-0ubuntu6
locales (2.3.5-1ubuntu11) to 2.3.5-1ubuntu12
update-notifier (0.40.12) to 0.40.13
xscreensaver (4.21-4ubuntu15) to 4.21-4ubuntu16
xscreensaver-data (4.21-4ubuntu15) to 4.21-4ubuntu16
xscreensaver-gl (4.21-4ubuntu15) to 4.21-4ubuntu16

On 10/10/05, Magnus Therning <magnus at therning.org> wrote:
> On Mon, Oct 10, 2005 at 01:06:05PM +0000, Tiago Cogumbreiro wrote:
> >Hello list,
> >
> >Something just happened and made me feel really insecure.
> >
> >I locked the screen while updating my computer with the update applet,
> >when the update finished the screen was no longer locked. Is this
> >possible? Maybe I am mistaken and this did not happen - that's why I'm
> >not going to open a bug report on this.
> >
> >However if some of you could try this same procedure and check if it
> >really does happen, it would mean that it is a major security breach.
>
> Out of curiosity, what was updated? Was the screensaver updated?
>
> /M
>
> --
> Magnus Therning                    (OpenPGP: 0xAB4DFBA4)
> magnus at therning.org
> http://therning.org/magnus
>
> Software is not manufactured, it is something you write and publish.
> Keep Europe free from software patents, we do not want censorship
> by patent law on written works.
>
> The definition of insanity is doing the same thing over and over again
> and expecting different results.
>      -- Albert Einstein
>
>
> --
> ubuntu-devel mailing list
> ubuntu-devel at lists.ubuntu.com
> http://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
>
>
>
>


--
Tiago Cogumbreiro <cogumbreiro at users.sf.net>

http://s1x.homelinux.net/



More information about the ubuntu-devel mailing list