Mageia: 2019-0111 Critical Advisory: Gnome Keyring Credential Leakage
mageia
March 14, 2019
It was discovered that GNOME Keyring incorrectly cleared out credentials supplied to the PAM module
Summary
It was discovered that GNOME Keyring incorrectly cleared out credentials
supplied to the PAM module. A local attacker could possibly use this
issue to discover login credentials (CVE-2018-20781).
References
- https://bugs.mageia.org/show_bug.cgi?id=24480
- https://ubuntu.com/security/notices/USN-3894-1
- https://www.cve.org/CVERecord?id=CVE-2018-20781
Resolution
SRPMS
- 6/core/gnome-keyring-3.20.0-1.1.mga6
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Publication date: 14 Mar 2019
URL: https://advisories.mageia.org/MGASA-2019-0111.html
Type: security
CVE: CVE-2018-20781
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!