Debian/gdm3: medium 6.4
A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing
Action: Upgrade gdm3 to 3.38.2.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.38.2.1-1 | - |
Fixed versions
| 3.38.2.1-1 |
Sources
- osv: DEBIAN-CVE-2020-27837#Debian:14/gdm3
- https://security-tracker.debian.org/tracker/CVE-2020-27837
published · modified · JSON