Re: [LightDM] Version 1.0.6 released

[Yves-Alexis Perez <corsac () debian org>]

On mer., 2011-11-02 at 11:42 -0400, Robert Ancell wrote:
> Fixes a security issue where using ~/.Xauthority as a symlink would
> cause LightDM to set the destination of the link to user ownership.
> All users of 1.0.4 or 1.0.5 should upgrade immediately.
>
> Overview of changes in lightdm 1.0.6
>
>     * Use lchown for correcting ownership of ~/.Xauthority instead of chown


Could a CVE be assigned for this?

Regards,
-- 
Yves-Alexis

Attachment: signature.asc
Description: This is a digitally signed message part