Re: Re: [LightDM] Version 1.0.6 released

[Kurt Seifried <kseifried () redhat com>]

On 11/02/2011 09:54 AM, Yves-Alexis Perez wrote:
> On mer., 2011-11-02 at 11:42 -0400, Robert Ancell wrote:
> > Fixes a security issue where using ~/.Xauthority as a symlink would
> > cause LightDM to set the destination of the link to user ownership.
> > All users of 1.0.4 or 1.0.5 should upgrade immediately.
> >
> > Overview of changes in lightdm 1.0.6
> >
> >     * Use lchown for correcting ownership of ~/.Xauthority instead of chown
>
> Could a CVE be assigned for this?
>
> Regards,
Can you send me the link to this announcement so I can confirm it? Thanks.

-- 

-Kurt Seifried / Red Hat Security Response Team