(RHSA-2011:0395) Moderate: gdm security update

2011-03-2800:00:00

access.redhat.com

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.6%

JSON

The GNOME Display Manager (GDM) provides the graphical login screen, shown
shortly after boot up, log out, and when user-switching.

A race condition flaw was found in the way GDM handled the cache
directories used to store users’ dmrc and face icon files. A local attacker
could use this flaw to trick GDM into changing the ownership of an
arbitrary file via a symbolic link attack, allowing them to escalate their
privileges. (CVE-2011-0727)

Red Hat would like to thank Sebastian Krahmer of the SuSE Security Team for
reporting this issue.

All users should upgrade to these updated packages, which contain a
backported patch to correct this issue. GDM must be restarted for this
update to take effect. Rebooting achieves this, but changing the runlevel
from 5 to 3 and back to 5 also restarts GDM.

OSVersionArchitecturePackageVersionFilename
RedHat6x86_64gdm-plugin-smartcard< 2.30.4-21.el6_0.1gdm-plugin-smartcard-2.30.4-21.el6_0.1.x86_64.rpm
RedHat6i686gdm-plugin-smartcard< 2.30.4-21.el6_0.1gdm-plugin-smartcard-2.30.4-21.el6_0.1.i686.rpm
RedHat6s390xgdm-plugin-fingerprint< 2.30.4-21.el6_0.1gdm-plugin-fingerprint-2.30.4-21.el6_0.1.s390x.rpm
RedHat6ppc64gdm-libs< 2.30.4-21.el6_0.1gdm-libs-2.30.4-21.el6_0.1.ppc64.rpm
RedHat6s390xgdm< 2.30.4-21.el6_0.1gdm-2.30.4-21.el6_0.1.s390x.rpm
RedHat6s390xgdm-plugin-smartcard< 2.30.4-21.el6_0.1gdm-plugin-smartcard-2.30.4-21.el6_0.1.s390x.rpm
RedHat6ppc64gdm< 2.30.4-21.el6_0.1gdm-2.30.4-21.el6_0.1.ppc64.rpm
RedHat6ppc64gdm-plugin-fingerprint< 2.30.4-21.el6_0.1gdm-plugin-fingerprint-2.30.4-21.el6_0.1.ppc64.rpm
RedHat6ppcgdm-libs< 2.30.4-21.el6_0.1gdm-libs-2.30.4-21.el6_0.1.ppc.rpm
RedHat6ppc64gdm-plugin-smartcard< 2.30.4-21.el6_0.1gdm-plugin-smartcard-2.30.4-21.el6_0.1.ppc64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	x86_64	gdm-plugin-smartcard	< 2.30.4-21.el6_0.1	gdm-plugin-smartcard-2.30.4-21.el6_0.1.x86_64.rpm
RedHat	6	i686	gdm-plugin-smartcard	< 2.30.4-21.el6_0.1	gdm-plugin-smartcard-2.30.4-21.el6_0.1.i686.rpm
RedHat	6	s390x	gdm-plugin-fingerprint	< 2.30.4-21.el6_0.1	gdm-plugin-fingerprint-2.30.4-21.el6_0.1.s390x.rpm
RedHat	6	ppc64	gdm-libs	< 2.30.4-21.el6_0.1	gdm-libs-2.30.4-21.el6_0.1.ppc64.rpm
RedHat	6	s390x	gdm	< 2.30.4-21.el6_0.1	gdm-2.30.4-21.el6_0.1.s390x.rpm
RedHat	6	s390x	gdm-plugin-smartcard	< 2.30.4-21.el6_0.1	gdm-plugin-smartcard-2.30.4-21.el6_0.1.s390x.rpm
RedHat	6	ppc64	gdm	< 2.30.4-21.el6_0.1	gdm-2.30.4-21.el6_0.1.ppc64.rpm
RedHat	6	ppc64	gdm-plugin-fingerprint	< 2.30.4-21.el6_0.1	gdm-plugin-fingerprint-2.30.4-21.el6_0.1.ppc64.rpm
RedHat	6	ppc	gdm-libs	< 2.30.4-21.el6_0.1	gdm-libs-2.30.4-21.el6_0.1.ppc.rpm
RedHat	6	ppc64	gdm-plugin-smartcard	< 2.30.4-21.el6_0.1	gdm-plugin-smartcard-2.30.4-21.el6_0.1.ppc64.rpm