EulerOS 2.0 SP5 : gdm (EulerOS-SA-2020-2546)

According to the versions of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local...

Security update for gdm (important)

openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2020:2264-1 Rating: important References: 1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for gdm fixes t...

SUSE-SU-2020:3799-1 Security update for gdm

This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150...

EulerOS 2.0 SP8 : gdm (EulerOS-SA-2020-2511)

According to the version of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner on...

SUSE SLES12 Security Update : gdm (SUSE-SU-2020:3614-1)

This update for gdm fixes the following issues : CVE-2020-16125: Fixed a privilege escalation bsc1178150. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much a...

SUSE SLED15 / SLES15 Security Update : gdm (SUSE-SU-2020:3333-1)

This update for gdm fixes the following issues : Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2020:3614-1 Security update for gdm

This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150...

CVE-2020-16125

A vulnerability was found in GDM. If gdm can't contact the AccountService service via DBus in a timely manner it would default to assume there are no existing users and would allow the attacker to create a new user with high privileges...

openSUSE Security Update : gdm (openSUSE-2020-1961)

This update for gdm fixes the following issues : - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Security update for gdm (important)

openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2020:1961-1 Rating: important References: 1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for gdm fixes t...

OPENSUSE-SU-2020:1961-1 Security update for gdm

This update for gdm fixes the following issues: - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. This update was imported from the SUSE:SLE-15-SP2:Update update project...

SUSE-SU-2020:3333-1 Security update for gdm

This update for gdm fixes the following issues: - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125...

GNOME security, bug fix, and enhancement update

dleyna-renderer 0.6.0-3 - Add a manual Resolves: 1612579 frei0r-plugins 1.6.1-7 - Rebuild with newer annobin to fix rpmdiff problems - Fix the build with a newer opencv - Resolves: rhbz1703994 gdm 3.28.3-34 - Fix file descriptor leak Resolves: 1877853 3.28.3-33 - Fix problem with Xorg fallback...

[ASA-202011-5] gdm: privilege escalation

Arch Linux Security Advisory ASA-202011-5 ========================================= Severity: High Date : 2020-11-10 CVE-ID : CVE-2020-16125 Package : gdm Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1264 Summary ======= The package gdm before version 3.38.2-1...

Debian DLA-2434-1 : gdm3 security update

It was discovered that there was an issue in the GNOME Display Manager where not detecting any users may make GDM launch initial system setup and thereby permitting the creation of new users with sudo capabilities. For Debian 9 'Stretch', this problem has been fixed in version 3.22.3-3+deb9u3. We...

Ubuntu 18.04 LTS / 20.04 LTS : GDM vulnerability (USN-4614-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4614-1 advisory. Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker ab...

GNOME security, bug fix, and enhancement update

accountsservice 0.6.50-8 - Dont set HasNoUsers=true if realmd has providers Related: 1750516 appstream-data 8-20191129 - Regenerate the RHEL metadata to include the latest evince changes - Resolves: 1768461 clutter 1.26.2-8 - rebuild to get the new in 8.2.0 - plus address 1785233 evince 3.28.4-4 ...

Authorization Bypass

gdm is vulnerable to authorization bypass. A lock screen bypass vulnerability exists when timed login is enabled...

Moderate: Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

An update for GNOME is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RLSA-2020:1766 Moderate: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of Rocky Linux. Security Fixes: LibRaw: stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp CVE-2018-20337 gdm: lock screen bypass when timed login is enabled CVE-2019-3825 gvfs: mishandling of file ownership in...