blob: daefd49e5993ad98dcf79409067517bd58cdf9c5 [file] [log] [blame]
<?xml version="1.0" encoding="UTF-8"?>
<glsa id="201405-26">
<title>X2Go Server: Privilege Escalation</title>
<synopsis>A local privilege escalation vulnerability has been discovered in
X2Go Server.
<product type="ebuild">x2go</product>
<announced>May 19, 2014</announced>
<revised>May 19, 2014: 1</revised>
<package name="net-misc/x2goserver" auto="yes" arch="*">
<unaffected range="ge"></unaffected>
<vulnerable range="lt"></vulnerable>
<p>X2Go is an open source terminal server project.</p>
<p>X2Go Server is prone to a local privilege-escalation vulnerability.</p>
<impact type="high">
<p>A local attacker could gain escalated privileges.</p>
<p>There is no known workaround at this time.</p>
<p>All X2Go Server users should upgrade to the latest version:</p>
# emerge --sync
# emerge --ask --oneshot --verbose "&gt;=net-misc/x2goserver-"
<uri link="">CVE-2013-7383</uri>
<metadata tag="requester" timestamp="Tue, 04 Mar 2014 17:00:01 +0000">
<metadata tag="submitter" timestamp="Mon, 19 May 2014 07:13:54 +0000">