oss-sec mailing list archives
Re: Two CVE request for gnome-shell/screensaver issues
From: cve-assign () mitre org
Date: Fri, 27 Dec 2013 01:33:32 -0500 (EST)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
https://bugzilla.gnome.org/show_bug.cgi?id=686740 https://git.gnome.org/browse/gnome-shell/log/js/ui/screenShield.js?qt=grep&q=686740 Reference: https://bugzilla.redhat.com/show_bug.cgi?id=1030431
The discussion in 686740 focuses on usability problems, not security problems. Comment 11 in 1030431 says "typing away at the lock screen will now trigger the unlock dialog (and redirect input to the password field)." Does this mean that 209014b083dbe86ed0e0860a6016735571b56f94 is a security fix, and the other screenShield.js commits are usability fixes? Or does it mean that 127f10e7a8bbbbd089d217f8cd89971c187ae9c3 is a security fix because the "will be dropped in the void" description isn't always accurate, and "will be dropped into the Activities panel" or "will be dropped into the 'Enter a command' dialog box" can occur instead? - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEcBAEBAgAGBQJSvR5OAAoJEKllVAevmvmscS4IAIvJNoHMY3Ew+4SDIZuVzNdw nMNx8U89bxWREv5XG17sTN2RuXwLjUjUQsBgS0FGgvQpbBxPp08Xy67t8thBuCRC 6EG/9cxSQtwXUVOoUGu6yHMrD9H3m2MxocOGPK+IkPHbkLJkpCU+Cp9kyX+wvSS1 1wwHMeiVlSxZb/pLkBGynrfuHSJ4IkJiuFOo6Z8kVHW1K5FuIS0kKDJ10LlWKi3Z gzET39N3PR5cD2rrluYxc4v/LtZnkFvgCPa7aFifknbJFk5LfeJfYqZX6N0F6Oad kgO5kNbjuAwm7c1qzbCcruOM+Q1eE/WG031gUVGmmsLedro+eYwr4OF4C+wPNa0= =XmWl -----END PGP SIGNATURE-----
Current thread:
- Two CVE request for gnome-shell/screensaver issues Huzaifa Sidhpurwala (Dec 26)
- Re: Two CVE request for gnome-shell/screensaver issues cve-assign (Dec 26)
- Re: Re: Two CVE request for gnome-shell/screensaver issues Huzaifa Sidhpurwala (Dec 27)
- Re: Two CVE request for gnome-shell/screensaver issues cve-assign (Dec 27)
- Re: Two CVE request for gnome-shell/screensaver issues cve-assign (Dec 26)