MGASA-2021-0003 - Updated gdm packages fix a security vulnerability Publication date: 04 Jan 2021 URL: https://advisories.mageia.org/MGASA-2021-0003.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-16125 Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user (CVE-2020-16125). References: - https://bugs.mageia.org/show_bug.cgi?id=27566 - https://ubuntu.com/security/notices/USN-4614-1 - https://lists.opensuse.org/archives/list/[email protected]/thread/ZX3UTGQD6BVLNXN2RQDQJAGIEKRWA7A4/ - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16125 SRPMS: - 7/core/gdm-3.32.0-1.1.mga7
Mageia 2021-0003: gdm security update
Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable
Summary
Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool
when the accountsservice daemon was not reachable. A local attacker able to
cause accountsservice to crash or stop responding could trick GDM into
launching the initial setup tool and create a privileged user (CVE-2020-16125).
References
- https://bugs.mageia.org/show_bug.cgi?id=27566
- https://ubuntu.com/security/notices/USN-4614-1
- https://lists.opensuse.org/archives/list/[email protected]/thread/ZX3UTGQD6BVLNXN2RQDQJAGIEKRWA7A4/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16125
Resolution
MGASA-2021-0003 - Updated gdm packages fix a security vulnerability
SRPMS
- 7/core/gdm-3.32.0-1.1.mga7
Severity
Publication date: 04 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0003.html
Type: security
CVE: CVE-2020-16125
News
HOWTOs
Features
A Complete Guide to Security Automation & Reporting Using Open Source Tools
How to Check if Your Linux System is Infected with a Virus
Security Considerations for Azure Linux & Windows Subsystem for Linux Users
Admins Receive Automated Linux Patch Management & Improved Security with ManageEngine Endpoint Central
Linux Malware: The Truth About This Growing Threat [Updated]
About Us
Powered By
