diff options
| author | Robert Ancell <robert.ancell@canonical.com> | 2017-05-12 11:23:40 +1200 |
|---|---|---|
| committer | Robert Ancell <robert.ancell@canonical.com> | 2017-05-12 11:23:40 +1200 |
| commit | a02a9dc440e652df2b9cb773142873c0d1c28b4b (patch) | |
| tree | d4ffc45cbc9786742b4d01a544466765b6c6d26c | |
| parent | c4d49635fd94e4bc6ff0a727dcf0f197cb0f6100 (diff) | |
| download | lightdm-git-lightdm-1-20.tar.gz | |
* SECURITY UPDATE: Guest session not confined (LP: #1663157)lightdm-1-20
- debian/50-disable-guest.conf:
- debian/lightdm.install:
- Disable guest sessions by default, this can be overridden by custom
configuration (e.g. /etc/lightdm/lightdm.conf)
- CVE-2017-8900
| -rw-r--r-- | debian/50-disable-guest.conf | 5 | ||||
| -rw-r--r-- | debian/changelog | 11 | ||||
| -rw-r--r-- | debian/lightdm.install | 1 |
3 files changed, 17 insertions, 0 deletions
diff --git a/debian/50-disable-guest.conf b/debian/50-disable-guest.conf new file mode 100644 index 00000000..4e01ff72 --- /dev/null +++ b/debian/50-disable-guest.conf @@ -0,0 +1,5 @@ +# Disable guest sessions due to them not being confined in systemd +# CVE-2017-8900 +# https://bugs.launchpad.net/bugs/1663157 +[Seat:*] +allow-guest=false diff --git a/debian/changelog b/debian/changelog index 86644c68..14528911 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,14 @@ +lightdm (1.19.5-0ubuntu1.2) yakkety-security; urgency=medium + + * SECURITY UPDATE: Guest session not confined (LP: #1663157) + - debian/50-disable-guest.conf: + - debian/lightdm.install: + - Disable guest sessions by default, this can be overridden by custom + configuration (e.g. /etc/lightdm/lightdm.conf) + - CVE-2017-8900 + + -- Robert Ancell <robert.ancell@canonical.com> Tue, 09 May 2017 09:32:16 +1200 + lightdm (1.19.5-0ubuntu1.1) yakkety-security; urgency=medium * SECURITY UPDATE: Directory traversal allowing arbitrary directory diff --git a/debian/lightdm.install b/debian/lightdm.install index e126cef9..14700b6d 100644 --- a/debian/lightdm.install +++ b/debian/lightdm.install @@ -19,3 +19,4 @@ debian/50-xserver-command.conf usr/share/lightdm/lightdm.conf.d debian/50-greeter-wrapper.conf usr/share/lightdm/lightdm.conf.d debian/50-guest-wrapper.conf usr/share/lightdm/lightdm.conf.d debian/50-disable-log-backup.conf usr/share/lightdm/lightdm.conf.d +debian/50-disable-guest.conf usr/share/lightdm/lightdm.conf.d |