{"id":"CVE-2019-3825","aliases":["ALSA-2020:1766","DEBIAN-CVE-2019-3825","EUVD-2019-13448","GHSA-pfhm-wwqj-c296","OESA-2021-1044","RHSA-2020:1766","RLSA-2020:1766","SUSE-SU-2019:0527-1","UBUNTU-CVE-2019-3825","USN-3892-1","openSUSE-SU-2019:0310-1","openSUSE-SU-2024:10780-1"],"status":"published","title":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration...","description":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.","severity":{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00508,"percentile":0.43675,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2019-02-06T00:00:00Z","modified":"2026-11-05T12:15:06Z","fixes":[{"ecosystem":"Debian:12","package":"gdm3","fixed_in":["3.30.2-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gdm3","fixed_in":["3.30.2-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gdm3","fixed_in":["3.30.2-3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS","package":"gdm","fixed_in":["3.30.1-10.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gdm","fixed_in":["3.30.1-10.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gdm","fixed_in":["3.26.2.1-13.19.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"gdm3","fixed_in":["3.28.3-0ubuntu18.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"accountsservice-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"baobab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"clutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"clutter-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gjs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-menus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-menus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-tweaks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.1-7.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0-2.el8.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mozjs52-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0-2.el8.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mozjs52-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-4.el8.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mozjs60-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mozjs60-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"60.9.0-4.el8.alma"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vala","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.19-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vala-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.19-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.2-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.2-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.2-3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-10.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-10.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"LibRaw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"LibRaw-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"LibRaw-samples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"accountsservice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"accountsservice-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"accountsservice-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"accountsservice-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"appstream-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8-20191129.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"baobab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"baobab-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"baobab-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"clutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"clutter-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"clutter-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince-browser-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince-browser-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince-nautilus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"evince-nautilus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.4-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.28.3-29.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.28.3-29.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.28.3-29.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gjs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gjs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gjs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gjs-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-boxes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-boxes-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-boxes-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-19.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-control-center-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-19.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-control-center-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-19.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-control-center-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-19.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-menus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-menus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-menus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-online-accounts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-online-accounts-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-online-accounts-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-online-accounts-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-remote-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-remote-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-remote-desktop-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.6-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-session-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-session-wayland-session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-session-xsession","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-settings-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.0-9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-settings-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.0-9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-settings-daemon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.0-9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-shell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-shell-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-software","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.30.6-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-software-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.30.6-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-software-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.30.6-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-software-editor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.30.6-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-software-editor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.30.6-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-terminal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-terminal-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-terminal-nautilus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-terminal-nautilus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-tweaks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-7.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gsettings-desktop-schemas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gsettings-desktop-schemas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk-update-icon-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk-update-icon-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3-immodule-xim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3-immodule-xim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3-immodules-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gtk3-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.30-5.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-afc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-afc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-afp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-afp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-archive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-archive-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-goa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-goa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-gphoto2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-gphoto2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-mtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-mtp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gvfs-smb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-34.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-34.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mutter-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-34.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mutter-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-34.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nautilus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nautilus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nautilus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nautilus-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nautilus-extensions-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vinagre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.0-21.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vinagre-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.0-21.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vinagre-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.0-21.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gsettings-desktop-schemas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"mozjs52-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"mozjs52-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"mozjs52-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"mozjs60-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"mozjs60-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"LibRaw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"LibRaw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"LibRaw-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"LibRaw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"LibRaw-samples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19.5-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"accountsservice-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"accountsservice-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"accountsservice-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"accountsservice-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.50-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"clutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"clutter-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"clutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"clutter-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"clutter-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gjs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gjs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gjs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gjs-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gnome-menus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gnome-menus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gnome-menus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-afc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-afp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-archive-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-goa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-gphoto2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-mtp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"gvfs-smb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mozjs52-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mozjs52-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mozjs52-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mozjs52-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mozjs60-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mozjs60-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mozjs60-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-34.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mutter-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-34.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-34.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mutter-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-34.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nautilus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nautilus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nautilus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nautilus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nautilus-extensions-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-12.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"vala","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.19-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"vala-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.19-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"vala-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.19-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"vala-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.19-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"valadoc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.19-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"baobab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-menus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-11.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-tweaks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-7.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.9.0-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mozjs60","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.9.0-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.2.1-13.19.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.18.0-2ubuntu1","3.18.0-2ubuntu2","3.18.0-2ubuntu3","3.18.0-2ubuntu4","3.18.2-1ubuntu1","3.18.2-1ubuntu2","3.18.3-0ubuntu1","3.18.3-0ubuntu2","3.18.3-0ubuntu2.1","3.18.3-0ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.3-0ubuntu18.04.4"}]}],"versions":["3.26.1-3ubuntu2","3.26.1-3ubuntu3","3.26.2.1-0ubuntu1","3.26.2.1-2ubuntu1","3.26.2.1-2ubuntu2","3.27.90-0ubuntu1","3.27.92-0ubuntu1","3.28.0-0ubuntu1","3.28.2-0ubuntu1.2","3.28.2-0ubuntu1.3","3.28.2-0ubuntu1.4","3.28.3-0ubuntu18.04.1","3.28.3-0ubuntu18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.3-0ubuntu18.04.4"}]}],"versions":["3.26.1-3ubuntu2","3.26.1-3ubuntu3","3.26.2.1-0ubuntu1","3.26.2.1-2ubuntu1","3.26.2.1-2ubuntu2","3.27.90-0ubuntu1","3.27.92-0ubuntu1","3.28.0-0ubuntu1","3.28.2-0ubuntu1.2","3.28.2-0ubuntu1.3","3.28.2-0ubuntu1.4","3.28.3-0ubuntu18.04.1","3.28.3-0ubuntu18.04.3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.38.2-2.7"}]}],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"gnome","product":"gnome_display_manager"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"the gnome projectr","product":"gdm"}],"references":[{"url":"https://usn.ubuntu.com/3892-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3825","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Mitigation","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3825","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pfhm-wwqj-c296"},{"url":"https://access.redhat.com/errata/RHSA-2020:1766","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1365717","tags":["report"]},{"url":"https://bugzilla.redhat.com/1656988","tags":["report"]},{"url":"https://bugzilla.redhat.com/1658001","tags":["report"]},{"url":"https://bugzilla.redhat.com/1661555","tags":["report"]},{"url":"https://bugzilla.redhat.com/1666070","tags":["report"]},{"url":"https://bugzilla.redhat.com/1668901","tags":["report"]},{"url":"https://bugzilla.redhat.com/1671744","tags":["report"]},{"url":"https://bugzilla.redhat.com/1672825","tags":["report"]},{"url":"https://bugzilla.redhat.com/1674535","tags":["report"]},{"url":"https://bugzilla.redhat.com/1684729","tags":["report"]},{"url":"https://bugzilla.redhat.com/1687979","tags":["report"]},{"url":"https://bugzilla.redhat.com/1690170","tags":["report"]},{"url":"https://bugzilla.redhat.com/1692299","tags":["report"]},{"url":"https://bugzilla.redhat.com/1710882","tags":["report"]},{"url":"https://bugzilla.redhat.com/1715890","tags":["report"]},{"url":"https://bugzilla.redhat.com/1716754","tags":["report"]},{"url":"https://bugzilla.redhat.com/1716761","tags":["report"]},{"url":"https://bugzilla.redhat.com/1716767","tags":["report"]},{"url":"https://bugzilla.redhat.com/1716774","tags":["report"]},{"url":"https://bugzilla.redhat.com/1719819","tags":["report"]},{"url":"https://bugzilla.redhat.com/1720249","tags":["report"]},{"url":"https://bugzilla.redhat.com/1720251","tags":["report"]},{"url":"https://bugzilla.redhat.com/1721124","tags":["report"]},{"url":"https://bugzilla.redhat.com/1721133","tags":["report"]},{"url":"https://bugzilla.redhat.com/1723462","tags":["report"]},{"url":"https://bugzilla.redhat.com/1723464","tags":["report"]},{"url":"https://bugzilla.redhat.com/1724302","tags":["report"]},{"url":"https://bugzilla.redhat.com/1725154","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728330","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728562","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728564","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728567","tags":["report"]},{"url":"https://bugzilla.redhat.com/1730612","tags":["report"]},{"url":"https://bugzilla.redhat.com/1730891","tags":["report"]},{"url":"https://bugzilla.redhat.com/1736742","tags":["report"]},{"url":"https://bugzilla.redhat.com/1742710","tags":["report"]},{"url":"https://bugzilla.redhat.com/1744452","tags":["report"]},{"url":"https://bugzilla.redhat.com/1744527","tags":["report"]},{"url":"https://bugzilla.redhat.com/1745147","tags":["report"]},{"url":"https://bugzilla.redhat.com/1747972","tags":["report"]},{"url":"https://bugzilla.redhat.com/1749372","tags":["report"]},{"url":"https://bugzilla.redhat.com/1750516","tags":["report"]},{"url":"https://bugzilla.redhat.com/1753520","tags":["report"]},{"url":"https://bugzilla.redhat.com/1759075","tags":["report"]},{"url":"https://bugzilla.redhat.com/1759525","tags":["report"]},{"url":"https://bugzilla.redhat.com/1759619","tags":["report"]},{"url":"https://bugzilla.redhat.com/1759913","tags":["report"]},{"url":"https://bugzilla.redhat.com/1760363","tags":["report"]},{"url":"https://bugzilla.redhat.com/1763207","tags":["report"]},{"url":"https://bugzilla.redhat.com/1765448","tags":["report"]},{"url":"https://bugzilla.redhat.com/1765632","tags":["report"]},{"url":"https://bugzilla.redhat.com/1766649","tags":["report"]},{"url":"https://bugzilla.redhat.com/1766695","tags":["report"]},{"url":"https://bugzilla.redhat.com/1768461","tags":["report"]},{"url":"https://bugzilla.redhat.com/1776530","tags":["report"]},{"url":"https://bugzilla.redhat.com/1777556","tags":["report"]},{"url":"https://bugzilla.redhat.com/1777911","tags":["report"]},{"url":"https://bugzilla.redhat.com/1778668","tags":["report"]},{"url":"https://bugzilla.redhat.com/1782425","tags":["report"]},{"url":"https://bugzilla.redhat.com/1782497","tags":["report"]},{"url":"https://bugzilla.redhat.com/1782517","tags":["report"]},{"url":"https://bugzilla.redhat.com/1785233","tags":["report"]},{"url":"https://bugzilla.redhat.com/1789474","tags":["report"]},{"url":"https://bugzilla.redhat.com/1793413","tags":["report"]},{"url":"https://bugzilla.redhat.com/1804123","tags":["report"]},{"url":"https://bugzilla.redhat.com/1809079","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-1766.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2018-20337","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12447","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12448","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12449","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-3825","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-3825","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1044","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1661555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1674535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1715890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1736742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1742710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1745147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1747972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1753520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1776530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1778668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1785233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1789474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809079","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1766.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20337","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3825","tags":["advisory","report"]},{"url":"https://gitlab.gnome.org/GNOME/gdm/issues/460","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/gdm/merge_requests/58","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12447","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12447","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12447","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12448","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12449","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:1766","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190527-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1112294","tags":["report"]},{"url":"https://bugzilla.suse.com/1112578","tags":["report"]},{"url":"https://bugzilla.suse.com/1113245","tags":["report"]},{"url":"https://bugzilla.suse.com/1113700","tags":["report"]},{"url":"https://bugzilla.suse.com/1120307","tags":["report"]},{"url":"https://bugzilla.suse.com/1124628","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3825","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-3825","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3892-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HFWYPRWLWQRK5AIC6KEJAE4KYRW7NG5K/#HFWYPRWLWQRK5AIC6KEJAE4KYRW7NG5K","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14424","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-3825","description":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.","status":"published","published":"2019-02-06T20:00:00Z","modified":"2024-08-04T19:19:18.68Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13448","description":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.","status":"published","published":"2019-02-06T20:00:00Z","modified":"2024-08-04T19:19:18Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:06:54.939848Z"}],"ghsa":[{"id":"GHSA-pfhm-wwqj-c296","title":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration...","description":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.","status":"published","published":"2022-05-13T01:31:16Z","modified":"2023-02-01T05:07:57Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:50:38.940908Z"}],"nvd":[{"id":"CVE-2019-3825","description":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.","status":"published","published":"2019-02-06T20:29:00.447Z","modified":"2026-06-17T02:35:40.097Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:05:04.689371Z"}],"osv":[{"id":"CVE-2019-3825","description":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.","status":"published","published":"2019-02-06T20:29:00.447Z","modified":"2026-10-24T10:30:19.4343316Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"DEBIAN-CVE-2019-3825","description":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.","status":"published","published":"2019-02-06T20:29:00.447Z","modified":"2026-09-21T07:03:19.048972696Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"OESA-2021-1044","title":"gdm security update","description":"The GNOME Display Manager is a system service that is responsible for providing graphical log-ins and managing local and remote displays, and if the session doesn't provide a display server, GDM will start the display server. It also provides initiate functionality for user-switching, so multiple users can be logged in at the same time.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.(CVE-2019-3825)","status":"published","published":"2021-03-05T11:04:16Z","modified":"2026-08-18T01:15:13.998952298Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2020:1766","title":"Red Hat Security Advisory: GNOME security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:00:18Z","modified":"2026-06-27T10:09:57Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RLSA-2020:1766","title":"Moderate: GNOME security, bug fix, and enhancement update","description":"GNOME is the default desktop environment of Rocky Linux.\n\nSecurity Fix(es):\n\n* LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)\n\n* gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)\n\n* gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)\n\n* gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)\n\n* gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","status":"published","published":"2020-04-28T09:13:23Z","modified":"2026-02-04T18:00:05.086527Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-3825","description":"A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.","status":"published","published":"2019-02-06T00:00:00Z","modified":"2026-04-22T11:57:06.155648Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"medium"},{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"ALSA-2020:1766","title":"Moderate: GNOME security, bug fix, and enhancement update","description":"GNOME is the default desktop environment of AlmaLinux.\n\nSecurity Fix(es):\n\n* LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)\n\n* gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)\n\n* gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)\n\n* gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)\n\n* gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-04-28T09:13:23Z","modified":"2026-11-05T12:15:06.903889404Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"openSUSE-SU-2019:0310-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled (bsc#1124628).\n\nOther issues fixed:\n\n- GLX applications do not work well when the proprietary nvidia driver is used with a\n  wayland session. Because of that this update disables wayland on that hardware (bsc#1112578).\n- Fixed an issue where gdm restart fails to kill user processes (bsc#1112294 and bsc#1113245).\n- Fixed a System halt in the screen with message 'End of ORACLE section' (bsc#1120307).\n- Fixed an issue which did not allow the returning to text console when gdm is stopped (bsc#1113700).\t\n- Fixed an issue which was causing system hang during the load of gdm (bsc#1112578).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T11:13:00Z","modified":"2026-02-04T02:19:48.882859Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10780-1","title":"gdm-3.38.2-2.7 on GA media","description":"These are all security issues fixed in the gdm-3.38.2-2.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:38:43.269894Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2019:0527-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled (bsc#1124628).\n\nOther issues fixed:\n\n- GLX applications do not work well when the proprietary nvidia driver is used with a\n  wayland session. Because of that this update disables wayland on that hardware (bsc#1112578).\n- Fixed an issue where gdm restart fails to kill user processes (bsc#1112294 and bsc#1113245).\n- Fixed a System halt in the screen with message 'End of ORACLE section' (bsc#1120307).\n- Fixed an issue which did not allow the returning to text console when gdm is stopped (bsc#1113700).\t\n- Fixed an issue which was causing system hang during the load of gdm (bsc#1112578).\n","status":"published","published":"2019-03-01T12:03:23Z","modified":"2025-05-02T04:09:16.87178Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3892-1","title":"gdm3 vulnerability","description":"Burghard Britzke discovered that GDM incorrectly handled certain configurations.\nAn attacker could possibly use this issue to get unauthorized access to\na different user.\n","status":"published","published":"2019-02-20T10:42:45Z","modified":"2026-04-27T15:23:46.516043Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}