Candidate: CVE-2016-2312 PublicDate: 2016-12-23 22:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2312 https://www.kde.org/info/security/advisory-20160209-1.txt https://bugs.kde.org/show_bug.cgi?id=358125 https://bugzilla.opensuse.org/show_bug.cgi?id=964548 Description: Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again. Ubuntu-Description: Notes: seth-arnold> the xenial plasma-workspace package is very different; I suspect it's not-affected but I can't say that definitively nor state where the affected code might live in xenial. Bugs: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814355 Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [6.8 MEDIUM] Patches_plasma-workspace: upstream_plasma-workspace: released (4:5.4.3-2) precise_plasma-workspace: DNE precise/esm_plasma-workspace: DNE trusty_plasma-workspace: DNE trusty/esm_plasma-workspace: DNE vivid/stable-phone-overlay_plasma-workspace: DNE vivid/ubuntu-core_plasma-workspace: DNE wily_plasma-workspace: released (4:5.4.2-0ubuntu1.1) xenial_plasma-workspace: not-affected (4:5.5.4-0ubuntu1) yakkety_plasma-workspace: ignored (reached end-of-life) zesty_plasma-workspace: ignored (reached end-of-life) artful_plasma-workspace: not-affected (4:5.5.4-0ubuntu1) bionic_plasma-workspace: not-affected (4:5.5.4-0ubuntu1) cosmic_plasma-workspace: not-affected (4:5.5.4-0ubuntu1) devel_plasma-workspace: not-affected (4:5.5.4-0ubuntu1)