Debian Cinnamon vulnerabilities

CVE-2018-13054 [HIGH] CVE-2018-13054: cinnamon - An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-u... An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointi

CVE-2014-1949 [HIGH] CVE-2014-1949: cinnamon - GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and... GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button. Scope: local bookworm: resolved (fixed in 2.2.14-1) bullseye: resolved (fixed in 2.2.14-1) forky: resolved (fixed in 2.2.14-1) sid: resolved (fixed in 2.2.14-1) trixie: resolv