Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:2264-1

Опубликовано: 15 дек. 2020
Источник: suse-cvrf

Описание

Security update for gdm

This update for gdm fixes the following issues:

  • CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
gdm-3.26.2.1-lp151.16.10.1
gdm-branding-upstream-3.26.2.1-lp151.16.10.1
gdm-devel-3.26.2.1-lp151.16.10.1
gdm-lang-3.26.2.1-lp151.16.10.1
gdmflexiserver-3.26.2.1-lp151.16.10.1
libgdm1-3.26.2.1-lp151.16.10.1
typelib-1_0-Gdm-1_0-3.26.2.1-lp151.16.10.1

Ссылки

Описание

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Затронутые продукты
openSUSE Leap 15.1:gdm-3.26.2.1-lp151.16.10.1
openSUSE Leap 15.1:gdm-branding-upstream-3.26.2.1-lp151.16.10.1
openSUSE Leap 15.1:gdm-devel-3.26.2.1-lp151.16.10.1
openSUSE Leap 15.1:gdm-lang-3.26.2.1-lp151.16.10.1
Ссылки
Уязвимость openSUSE-SU-2020:2264-1