openSUSE Security Update : gdm (openSUSE-2020-1961)

This update for gdm fixes the following issues : - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Security update for gdm (important)

openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2020:1961-1 Rating: important References: 1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for gdm fixes t...

OPENSUSE-SU-2020:1961-1 Security update for gdm

This update for gdm fixes the following issues: - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. This update was imported from the SUSE:SLE-15-SP2:Update update project...

SUSE-SU-2020:3333-1 Security update for gdm

This update for gdm fixes the following issues: - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125...

GNOME security, bug fix, and enhancement update

dleyna-renderer 0.6.0-3 - Add a manual Resolves: 1612579 frei0r-plugins 1.6.1-7 - Rebuild with newer annobin to fix rpmdiff problems - Fix the build with a newer opencv - Resolves: rhbz1703994 gdm 3.28.3-34 - Fix file descriptor leak Resolves: 1877853 3.28.3-33 - Fix problem with Xorg fallback...

[ASA-202011-5] gdm: privilege escalation

Arch Linux Security Advisory ASA-202011-5 ========================================= Severity: High Date : 2020-11-10 CVE-ID : CVE-2020-16125 Package : gdm Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1264 Summary ======= The package gdm before version 3.38.2-1...

Debian DLA-2434-1 : gdm3 security update

It was discovered that there was an issue in the GNOME Display Manager where not detecting any users may make GDM launch initial system setup and thereby permitting the creation of new users with sudo capabilities. For Debian 9 'Stretch', this problem has been fixed in version 3.22.3-3+deb9u3. We...

Ubuntu 18.04 LTS / 20.04 LTS : GDM vulnerability (USN-4614-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4614-1 advisory. Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker ab...

GNOME security, bug fix, and enhancement update

accountsservice 0.6.50-8 - Dont set HasNoUsers=true if realmd has providers Related: 1750516 appstream-data 8-20191129 - Regenerate the RHEL metadata to include the latest evince changes - Resolves: 1768461 clutter 1.26.2-8 - rebuild to get the new in 8.2.0 - plus address 1785233 evince 3.28.4-4 ...

Authorization Bypass

gdm is vulnerable to authorization bypass. A lock screen bypass vulnerability exists when timed login is enabled...

Moderate: Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

An update for GNOME is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RLSA-2020:1766 Moderate: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of Rocky Linux. Security Fixes: LibRaw: stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp CVE-2018-20337 gdm: lock screen bypass when timed login is enabled CVE-2019-3825 gvfs: mishandling of file ownership in...

GNOME security, bug fix, and enhancement update

An update is available for mozjs52, gnome-tweaks, clutter, gnome-menus, mozjs60, baobab. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNOME is the default...

Denial Of Service (DoS)

gdm is vulnerable to denial of service. A flaw was found in the way Gdm listens on its unix domain socket. A local user could crash a running X session by writing malicious data to Gdm's unix domain socket...

Privilege Escalation

gdm is vulnerable to privilege escalation. A race condition issue in the way Gdm modifies the permissions on the .ICEauthority file allows a local attacker to exploit this flaw to gain privileges...

CentOS 7 : GNOME (RHSA-2020:1021)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1021 advisory. - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to...

LibRaw, accountsservice, colord, control, gdm, gnome, gsettings, gtk, gtk3, libcanberra, libgweather, mutter, nautilus, osinfo, shared, tracker, xchat security update

CentOS Errata and Security Advisory CESA-2020:1021 An update for GNOME is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

GNOME security, bug fix, and enhancement update

accountsservice 0.6.50-7 - version bump to prevent future update path introduced by RHBA-2019:45836 Resolves: 1721562 colord 1.3.4-2 - Downgrade a trivial warning to a debug statement - Resolves: 1421231 control-center 3.28.1-6 - Calculate better extents for the configured displays arrangement...

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2017-1173)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2017-1174)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...