compiz - Nov 2007 - CVE-2007-3920

A bypass for screensaver password dialogs has been found within compiz.

What about it?
Ubuntu created a patch, gentoo took the same:
https://bugs.gentoo.org/show_bug.cgi?id=196878

-- 
Hanno B?ck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno at hboeck.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url :
http://lists.freedesktop.org/archives/compiz/attachments/20071106/4621e418/attachment.pgp

Hanno B?ck wrote:
> A bypass for screensaver password dialogs has been found within compiz.
> 
> What about it?
> Ubuntu created a patch, gentoo took the same:
> https://bugs.gentoo.org/show_bug.cgi?id=196878
I'm no expert in these matter, but is hard coding
"gnome-screensaver"
into compiz the "right" solution for this problem? Would KDE's
screensaver or xscreensaver suffer from similar problems that this fix
doesn't address?

Perhaps the first hunk of the patch catches these cases? Can you shed a
little light on it for the benefit of the cranially challenged? ;)

Col