USN-1099-1: GDM vulnerability
30 March 2011
A GDM vulnerability allows local attackers to gain root privileges.
- gdm - GNOME Display Manager
Sebastian Krahmer discovered that GDM (GNOME Display Manager) did not
properly drop privileges when handling the cache directories used
to store users' dmrc and face icon files. This could allow a local
attacker to change the ownership of arbitrary files, thereby gaining
The problem can be corrected by updating your system to the following package versions:
After a standard system update you need to log out all desktop sessions
and restart GDM to make all the necessary changes.