MGASA-2021-0003 - Updated gdm packages fix a security vulnerability Publication date: 04 Jan 2021 URL: https://advisories.mageia.org/MGASA-2021-0003.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-16125 Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user (CVE-2020-16125). References: - https://bugs.mageia.org/show_bug.cgi?id=27566 - https://ubuntu.com/security/notices/USN-4614-1 - https://lists.opensuse.org/archives/list/[email protected]/thread/ZX3UTGQD6BVLNXN2RQDQJAGIEKRWA7A4/ - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16125 SRPMS: - 7/core/gdm-3.32.0-1.1.mga7
Mageia 2021-0003: gdm security update
Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable
Summary
CVE: CVE-2020-16125
Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool
when the accountsservice daemon was not reachable. A local attacker able to
cause accountsservice to crash or stop responding could trick GDM into
launching the initial setup tool and create a privileged user (CVE-2020-16125).
Resolution
MGASA-2021-0003 - Updated gdm packages fix a security vulnerability
References
- https://bugs.mageia.org/show_bug.cgi?id=27566
- https://ubuntu.com/security/notices/USN-4614-1
- https://lists.opensuse.org/archives/list/[email protected]/thread/ZX3UTGQD6BVLNXN2RQDQJAGIEKRWA7A4/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16125
Severity
Issued Date: 04 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0003.html
Type: security
Affected Mageia releases: 7
News
HOWTOs
Features
Secure Linux Hosting for Businesses
What Is Threat Intelligence?
CloudLinux Simplifies & Enhances Linux Security with its TuxCare Unified Enterprise Support Services
LinuxSecurity, Leading Provider of Linux Security News and Information, Unveils its New Website
Biden's New Executive Cybersecurity Order Highlights the Power of Open-Source Security
About Us
Powered By
