Lucene search
RedHatRHSA-2017:2128HistoryAug 01, 2017 - 5:58 a.m.
(RHSA-2017:2128) Moderate: gdm and gnome-session security, bug fix, and enhancement update
2017-08-0105:58:39
access.redhat.com
16
0.001 Low
EPSS
Percentile
26.7%
The GNOME Display Manager (GDM) provides the graphical login screen shown shortly after boot up, log out, and when user-switching.
The following packages have been upgraded to a later upstream version: gdm (3.22.3), gnome-session (3.22.3). (BZ#1386862, BZ#1386957)
Security Fix(es):
- It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is locked, possibly bypassing the locked screen. (CVE-2015-7496)
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | aarch64 | gdm-devel | < 3.22.3-11.el7 | gdm-devel-3.22.3-11.el7.aarch64.rpm |
| RedHat | 7 | ppc64le | gdm | < 3.22.3-11.el7 | gdm-3.22.3-11.el7.ppc64le.rpm |
| RedHat | 7 | ppc64le | gnome-session-debuginfo | < 3.22.3-4.el7 | gnome-session-debuginfo-3.22.3-4.el7.ppc64le.rpm |
| RedHat | 7 | ppc64 | gnome-session-debuginfo | < 3.22.3-4.el7 | gnome-session-debuginfo-3.22.3-4.el7.ppc64.rpm |
| RedHat | 7 | ppc | gdm-debuginfo | < 3.22.3-11.el7 | gdm-debuginfo-3.22.3-11.el7.ppc.rpm |
| RedHat | 7 | ppc64 | gnome-session-xsession | < 3.22.3-4.el7 | gnome-session-xsession-3.22.3-4.el7.ppc64.rpm |
| RedHat | 7 | aarch64 | gnome-session-custom-session | < 3.22.3-4.el7 | gnome-session-custom-session-3.22.3-4.el7.aarch64.rpm |
| RedHat | 7 | x86_64 | gnome-session-custom-session | < 3.22.3-4.el7 | gnome-session-custom-session-3.22.3-4.el7.x86_64.rpm |
| RedHat | 7 | aarch64 | gnome-session | < 3.22.3-4.el7 | gnome-session-3.22.3-4.el7.aarch64.rpm |
| RedHat | 7 | ppc64le | gnome-session | < 3.22.3-4.el7 | gnome-session-3.22.3-4.el7.ppc64le.rpm |
Related
nessus
nessus
EulerOS 2.0 SP1 : gdm (EulerOS-SA-2017-1173)
2017-09-08 00:00:00
EulerOS 2.0 SP2 : gdm (EulerOS-SA-2017-1174)
2017-09-08 00:00:00
CentOS 7 : gdm / gnome-session (CESA-2017:2128)
2017-08-25 00:00:00
ubuntucve
ubuntucve
CVE-2015-7496
2015-11-24 00:00:00
centos
centos
gdm, gnome security update
2017-08-24 01:37:12
fedora
fedora
[SECURITY] Fedora 23 Update: gdm-3.18.2-1.fc23
2015-11-22 02:26:25
cvelist
cvelist
CVE-2015-7496
2015-11-24 20:00:00
nvd
nvd
CVE-2015-7496
2015-11-24 20:59:06
mageia
mageia
Updated gdm packages fix security vulnerability
2017-08-08 01:16:24
cve
cve
CVE-2015-7496
2015-11-24 20:59:06
oraclelinux
oraclelinux
gdm and gnome-session security, bug fix, and enhancement update
2017-08-07 00:00:00
openvas
openvas
RedHat Update for gdm and gnome-session RHSA-2017:2128-01
2017-08-04 00:00:00
Mageia: Security Advisory (MGASA-2017-0248)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2017-1173)
2020-01-23 00:00:00
prion
prion
Code injection
2015-11-24 20:59:00
debiancve
debiancve
CVE-2015-7496
2015-11-24 20:59:06
freebsd
freebsd
gdm -- lock screen bypass when holding escape key
2015-11-12 00:00:00