Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3799-1

Опубликовано: 14 дек. 2020
Источник: suse-cvrf

Описание

Security update for gdm

This update for gdm fixes the following issues:

  • CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).

Список пакетов

SUSE Linux Enterprise Module for Desktop Applications 15 SP1
gdm-3.26.2.1-13.39.2
gdm-devel-3.26.2.1-13.39.2
gdm-lang-3.26.2.1-13.39.2
gdmflexiserver-3.26.2.1-13.39.2
libgdm1-3.26.2.1-13.39.2
typelib-1_0-Gdm-1_0-3.26.2.1-13.39.2

Ссылки

Описание

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP1:gdm-3.26.2.1-13.39.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP1:gdm-devel-3.26.2.1-13.39.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP1:gdm-lang-3.26.2.1-13.39.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP1:gdmflexiserver-3.26.2.1-13.39.2
Ссылки