Slackware alert: gdm security update (SSA:2003-300-01)

Posted by dave on Oct 27, 2003 11:07 AM EDT
Mailing list
Mail this story
Print this story

GDM is the GNOME Display Manager, and is commonly used to provide a graphical login for local users.

Hash: SHA1

[slackware-security] gdm security update (SSA:2003-300-01)

GDM is the GNOME Display Manager, and is commonly used to provide a graphical login for local users.

Upgraded gdm packages are available for Slackware 9.0, 9.1, and -current. These fix two vulnerabilities which could allow a local user to crash or freeze gdm, preventing access to the machine until a reboot. Sites using gdm should upgrade, especially sites such as computer labs that use gdm to provide public or semi-public access.

More details about these issues may be found in the Common Vulnerabilities and Exposures (CVE) database:

Here are the details from the Slackware 9.1 ChangeLog: +--------------------------+ Wed Oct 22 12:10:11 PDT 2003 patches/packages/gdm- Upgraded to gdm- This fixes a bug which can allow a local user to crash gdm, preventing access until the machine is rebooted. (* Security fix *) +--------------------------+

WHERE TO FIND THE NEW PACKAGES: +-----------------------------+

Updated package for Slackware 9.0:

Updated package for Slackware 9.1:

Updated package for Slackware -current:

MD5 SIGNATURES: +-------------+

Slackware 9.0 package: ba1123ac6d5f56401cd80efcabcd9502 gdm-

Slackware 9.1 package: bb34febec76f6c61f9d3740a95082db8 gdm-

Slackware -current package: bb34febec76f6c61f9d3740a95082db8 gdm-

INSTALLATION INSTRUCTIONS: +------------------------+

First, stop gdm. If you're using runlevel 4 to start gdm, issue the command to change to a console-based runlevel:

# telinit 3

Next, upgrade gdm as root:

# upgradepkg gdm-

Finally, restart gdm:

# telinit 4


Slackware Linux Security Team

+------------------------------------------------------------------------+ | HOW TO REMOVE YOURSELF FROM THIS MAILING LIST: | +------------------------------------------------------------------------+ | Send an email to with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back. Follow the instructions to | | complete the unsubscription. Do not reply to this message to | | unsubscribe! | +------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux)


» Read more about: Story Type: Security; Groups: Slackware

« Return to the newswire homepage

This topic does not have any threads posted yet!

You cannot post until you login.