[ASA-201903-3] gdm: access restriction bypass
foxboron at archlinux.org
Mon Mar 4 08:54:40 UTC 2019
Arch Linux Security Advisory ASA-201903-3
Date : 2019-03-03
CVE-ID : CVE-2019-3820 CVE-2019-3825
Package : gdm
Type : access restriction bypass
Remote : No
Link : https://security.archlinux.org/AVG-879
The package gdm before version 3.30.3-1 is vulnerable to access
Upgrade to 3.30.3-1.
# pacman -Syu "gdm>=3.30.3-1"
The problems have been fixed upstream in version 3.30.3.
- CVE-2019-3820 (access restriction bypass)
A partial screen lock bypass via keybindings has been found in gdm <=
3.30.2, allowing a local attacker to unlock a session under certain
- CVE-2019-3825 (access restriction bypass)
An issue has been found in gdm <= 3.30.2, allowing a local attacker
with valid credentials to unlock the session for a different user than
A local attacker can unlock session if they have other valid
credentials, or under certain circumstances.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the arch-security