CVE-2019-3825

The GNOME Display Manager is a system service that is responsible for providing graphical log-ins and managing local and remote displays, and if the session doesn't provide a display server, GDM will start the display server. It also provides initiate functionality for user-switching, so multiple users can be logged in at the same time.

Security Fix(es):

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.(CVE-2019-3825)

GNOME is the default desktop environment of Rocky Linux.

Security Fix(es):

• LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)

• gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)

• gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)

• gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)

• gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

• LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)

• gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)

• gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)

• gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)

• gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

This update for gdm fixes the following issues:

Security issue fixed:

• CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled (bsc#1124628).

Other issues fixed:

• GLX applications do not work well when the proprietary nvidia driver is used with a wayland session. Because of that this update disables wayland on that hardware (bsc#1112578).
• Fixed an issue where gdm restart fails to kill user processes (bsc#1112294 and bsc#1113245).
• Fixed a System halt in the screen with message 'End of ORACLE section' (bsc#1120307).
• Fixed an issue which did not allow the returning to text console when gdm is stopped (bsc#1113700).
• Fixed an issue which was causing system hang during the load of gdm (bsc#1112578).

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the gdm-3.38.2-2.7 package on the GA media of openSUSE Tumbleweed.

This update for gdm fixes the following issues:

Security issue fixed:

• CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled (bsc#1124628).

Other issues fixed:

• GLX applications do not work well when the proprietary nvidia driver is used with a wayland session. Because of that this update disables wayland on that hardware (bsc#1112578).
• Fixed an issue where gdm restart fails to kill user processes (bsc#1112294 and bsc#1113245).
• Fixed a System halt in the screen with message 'End of ORACLE section' (bsc#1120307).
• Fixed an issue which did not allow the returning to text console when gdm is stopped (bsc#1113700).
• Fixed an issue which was causing system hang during the load of gdm (bsc#1112578).

Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user.