Red Hat Security AdvisoryRHSA-2011:0395
gdm security update
Released 2011-03-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) gdm-1:2.30.4-21.el6_0.1, gdm-libs-1:2.30.4-21.el6_0.1, gdm-plugin-fingerprint-1:2.30.4-21.el6_0.1 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) gdm-1:2.30.4-21.el6_0.1, gdm-libs-1:2.30.4-21.el6_0.1, gdm-plugin-fingerprint-1:2.30.4-21.el6_0.1 +2
- Red Hat Enterprise Linux Server (v. 6) gdm-1:2.30.4-21.el6_0.1, gdm-libs-1:2.30.4-21.el6_0.1, gdm-libs-1:2.30.4-21.el6_0.1.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) gdm-1:2.30.4-21.el6_0.1, gdm-libs-1:2.30.4-21.el6_0.1, gdm-plugin-fingerprint-1:2.30.4-21.el6_0.1 +2
Fixes 1 record
Priority LOW 31
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00376 · Published 2011-03-31 · Fixed CWE-59
