Summary
The remote host is missing updates announced in
advisory GLSA 201201-16.
Solution
All xkeyboard-config users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=x11-misc/xkeyboard-config-2.4.1-r3'
NOTE: The X.Org X Server 1.11 was only stable on the AMD64, ARM, HPPA, and x86 architectures. Users of the stable branches of all other architectures are not affected and will be directly provided with a fixed
X Keyboard Configuration Database version.
http://www.securityspace.com/smysecure/catid.html?in=GLSA%20201201-16 http://bugs.gentoo.org/show_bug.cgi?id=399347
Insight
A debugging functionality in the X.Org X Server that is bound to a hotkey by default can be used by local attackers to circumvent screen locking utilities.
Severity
Classification
-
CVE CVE-2012-0064 -
CVSS Base Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities