Ubuntu Security Notice 3892-1 - Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user.
5cbde4b75000a4c185fe9c87414fb3810aba4a7733e35005a88e58de4295fb5f
==========================================================================
Ubuntu Security Notice USN-3892-1
February 20, 2019
gdm3 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.10
- Ubuntu 18.04 LTS
Summary:
GDM could give unauthorized access to a different user.
Software Description:
- gdm3: GNOME Display Manager
Details:
Burghard Britzke discovered that GDM incorrectly handled certain
configurations. An attacker could possibly use this issue to get
unauthorized access to a different user.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.10:
gdm3 3.30.1-1ubuntu5.1
Ubuntu 18.04 LTS:
gdm3 3.28.3-0ubuntu18.04.4
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
https://usn.ubuntu.com/usn/usn-3892-1
CVE-2019-3825
Package Information:
https://launchpad.net/ubuntu/+source/gdm3/3.30.1-1ubuntu5.1
https://launchpad.net/ubuntu/+source/gdm3/3.28.3-0ubuntu18.04.4