{
  "schema_version": "1.7.0",
  "id": "MGASA-2013-0312",
  "published": "2013-10-17T19:55:32Z",
  "modified": "2013-10-17T19:54:58Z",
  "summary": "Updated clutter packages fix CVE-2013-2190",
  "details": "Updated clutter packages fix security vulnerability:\n\nA security flaw was found in the way Clutter, an open source software library\nfor creating rich graphical user interfaces, used to manage translation of\nhierarchy events in certain circumstances (when underlying device disappeared,\ncausing XIQueryDevice query to throw an error). Physically proximate attackers\ncould use this flaw for example to obtain unauthorized access to gnome-shell\nsession right after system resume (due to gnome-shell crash) (CVE-2013-2190).\n",
  "upstream": [
    "CVE-2013-2190"
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://advisories.mageia.org/MGASA-2013-0312.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00014.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=11448"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Mageia:2",
        "name": "clutter",
        "purl": "pkg:rpm/mageia/clutter?arch=source&distro=mageia-2"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.8-1.1.mga2"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    },
    {
      "package": {
        "ecosystem": "Mageia:3",
        "name": "clutter",
        "purl": "pkg:rpm/mageia/clutter?arch=source&distro=mageia-3"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.12.2-2.1.mga3"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    }
  ],
  "credits": [
    {
      "name": "Mageia",
      "type": "COORDINATOR",
      "contact": [
        "https://wiki.mageia.org/en/Packages_Security_Team"
      ]
    }
  ]
}