{"id":"CVE-2020-16125","aliases":["ALSA-2021:1586","DEBIAN-CVE-2020-16125","DLA-2434-1","EUVD-2020-8091","GHSA-pc8h-hq5p-vf38","MGASA-2021-0003","RHSA-2021:1586","RLSA-2021:1586","SUSE-SU-2020:3333-1","SUSE-SU-2020:3614-1","SUSE-SU-2020:3799-1","UBUNTU-CVE-2020-16125","USN-4614-1","openSUSE-SU-2020:1961-1","openSUSE-SU-2020:2264-1","openSUSE-SU-2024:11547-1"],"status":"published","title":"gdm3 would start gnome-initial-setup if it cannot contact accountservice","description":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01109,"percentile":0.66318,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-754"],"published":"2020-11-03T00:00:00Z","modified":"2026-10-29T11:12:06Z","exploits":[{"source":"pocgithub","id":"za970120604/CVE-2020-16125-Reproduction","title":"za970120604/CVE-2020-16125-Reproduction","date":"2023-08-03","url":"https://github.com/za970120604/CVE-2020-16125-Reproduction"}],"fixes":[{"ecosystem":"Debian:12","package":"gdm3","fixed_in":["3.38.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gdm3","fixed_in":["3.38.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gdm3","fixed_in":["3.38.2-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"gdm3","fixed_in":["3.22.3-3+deb9u3"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"gdm","fixed_in":["3.32.0-1.1.mga7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"gdm","fixed_in":["3.34.1-8.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"gdm","fixed_in":["3.10.0.1-54.17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"gdm","fixed_in":["3.26.2.1-13.39.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"gdm3","fixed_in":["3.28.3-0ubuntu18.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gdm3","fixed_in":["3.36.3-0ubuntu0.20.04.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"gdm","fixed_in":["3.34.1-lp152.6.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"gdm","fixed_in":["3.26.2.1-lp151.16.10.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"OpenEXR-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-12.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"OpenEXR-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-12.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"accountsservice-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.55-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"atkmm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.2-7.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"atkmm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.2-7.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"atkmm-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.2-7.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cairomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-8.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cairomm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-8.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cairomm-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-8.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"chrome-gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1-7.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dleyna-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dleyna-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"enchant2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"enchant2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gamin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.10-32.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gamin-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.10-32.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"geoclue2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"geoclue2-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"geoclue2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"geoclue2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"geocode-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"geocode-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gjs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56.2-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gjs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56.2-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glib2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glib2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glibmm24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glibmm24-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glibmm24-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.0-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-boxes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.5-8.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-photos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.1-4.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-photos-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.1-4.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.3-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-terminal-nautilus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.3-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.32-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.32-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtk2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.32-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtk2-immodule-xim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.32-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtk2-immodules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.32-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtkmm24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.5-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtkmm24-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.5-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtkmm24-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.5-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtkmm30","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.2-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtkmm30-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.2-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gtkmm30-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.2-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-afc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-afp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-archive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-goa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-gphoto2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-mtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gvfs-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libdazzle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libdazzle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libepubgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libepubgen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsass-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsigc++20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsigc++20-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsigc++20-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libvisual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.0-25.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libvisual-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.0-25.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.2-57.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nautilus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.1-15.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nautilus-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.1-15.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nautilus-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.1-15.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pangomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.1-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pangomm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.1-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pangomm-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.1-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"soundtouch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"soundtouch-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vala","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.19-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vala-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.19-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"woff2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"woff2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Debian:12","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.38.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.38.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.38.2-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.3-3+deb9u3"}]}],"versions":["3.22.3-3","3.22.3-3+deb9u1","3.22.3-3+deb9u2"]},{"source":"osv","ecosystem":"Mageia:7","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.0-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-fam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-fam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-fam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-9.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.28.3-39.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.28.3-39.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gdm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.28.3-39.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cairomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-8.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.55-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"atkmm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.2-7.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"chrome-gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.1-7.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dleyna-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dleyna-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"enchant2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gamin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.10-32.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.28.3-39.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"geoclue2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"geocode-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gjs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.2-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glibmm24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.0-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-boxes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.5-8.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-boxes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.5-8.el8.rocky.0.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-control-center","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-27.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-online-accounts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.2-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-photos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-4.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-settings-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.0-14.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-30.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-software","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.36.1-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.3-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.32-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gtk-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gtkmm24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.5-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gtkmm30","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.22.2-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gvfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2-11.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libdazzle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.5-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libepubgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libsass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.5-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libsigc++20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libvisual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.0-25.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.2-57.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nautilus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.1-15.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-12.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pangomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.1-6.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"soundtouch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-3.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"vala","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.19-2.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.30.4-1.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"woff2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-5.el8"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-8.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0.1-54.17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.2.1-13.39.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.18.0-2ubuntu1","3.18.0-2ubuntu2","3.18.0-2ubuntu3","3.18.0-2ubuntu4","3.18.2-1ubuntu1","3.18.2-1ubuntu2","3.18.3-0ubuntu1","3.18.3-0ubuntu2","3.18.3-0ubuntu2.1","3.18.3-0ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.3-0ubuntu18.04.6"}]}],"versions":["3.26.1-3ubuntu2","3.26.1-3ubuntu3","3.26.2.1-0ubuntu1","3.26.2.1-2ubuntu1","3.26.2.1-2ubuntu2","3.27.90-0ubuntu1","3.27.92-0ubuntu1","3.28.0-0ubuntu1","3.28.2-0ubuntu1.2","3.28.2-0ubuntu1.3","3.28.2-0ubuntu1.4","3.28.3-0ubuntu18.04.1","3.28.3-0ubuntu18.04.3","3.28.3-0ubuntu18.04.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.3-0ubuntu0.20.04.2"}]}],"versions":["3.34.1-1ubuntu1","3.36.3-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.3-0ubuntu18.04.6"}]}],"versions":["3.26.1-3ubuntu2","3.26.1-3ubuntu3","3.26.2.1-0ubuntu1","3.26.2.1-2ubuntu1","3.26.2.1-2ubuntu2","3.27.90-0ubuntu1","3.27.92-0ubuntu1","3.28.0-0ubuntu1","3.28.2-0ubuntu1.2","3.28.2-0ubuntu1.3","3.28.2-0ubuntu1.4","3.28.3-0ubuntu18.04.1","3.28.3-0ubuntu18.04.3","3.28.3-0ubuntu18.04.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gdm3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.3-0ubuntu0.20.04.2"}]}],"versions":["3.34.1-1ubuntu1","3.36.3-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.34.1-lp152.6.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.2.1-lp151.16.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gdm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.0-1.1"}]}],"bundled":2}],"products":[{"vendor":"gnome","product":"gdm3"},{"vendor":"gnome","product":"gnome_display_manager"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/gdm/-/issues/642","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","evidence","article"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1900314","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://securitylab.github.com/advisories/GHSL-2020-202-gdm3-LPE-unresponsive-accounts-daemon","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16125","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pc8h-hq5p-vf38"},{"url":"https://errata.almalinux.org/8/ALSA-2021-1586.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-13012","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-13543","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-13584","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-16125","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9948","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9951","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9983","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-1817","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-1820","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-1825","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-1826","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-30661","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-16125","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0003.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27566","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4614-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZX3UTGQD6BVLNXN2RQDQJAGIEKRWA7A4/","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1586","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=837035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1152037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1833787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1842229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1846376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1854290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1865718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1870837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921151","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1586.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13012","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13012","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9948","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9951","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9951","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9951","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9983","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9983","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13543","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2020-0009.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901994","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16125","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986852","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1817","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2021-0004.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986856","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1820","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1820","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986858","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1825","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1825","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986860","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1826","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986870","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30661","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1586","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203333-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178150","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16125","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203614-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203799-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-16125","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OSCPFN6UQDWHTSA3DT4W6QWNTQE4X4HE/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27837","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-16125","title":"gdm3 would start gnome-initial-setup if it cannot contact accountservice","description":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.","status":"published","published":"2020-11-10T04:20:13.785Z","modified":"2024-09-17T03:59:24.216Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:35:59.116379Z"}],"euvd":[{"id":"EUVD-2020-8091","description":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.","status":"published","published":"2020-11-10T04:20:13Z","modified":"2024-09-17T03:59:24Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:27.115818Z"}],"ghsa":[{"id":"GHSA-pc8h-hq5p-vf38","title":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the...","description":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.","status":"published","published":"2022-05-24T17:33:38Z","modified":"2023-01-29T05:04:25Z","cwes":["CWE-754"],"updated_at":"2026-11-02T14:45:33.218232Z"}],"nvd":[{"id":"CVE-2020-16125","description":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.","status":"published","published":"2020-11-10T05:15:11.893Z","modified":"2026-06-17T02:57:45.2Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:06:24.137599Z"}],"osv":[{"id":"CVE-2020-16125","description":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.","status":"published","published":"2020-11-10T05:15:11.893Z","modified":"2026-10-29T11:12:05.341330163Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"DEBIAN-CVE-2020-16125","description":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.","status":"published","published":"2020-11-10T05:15:11.893Z","modified":"2026-10-26T12:00:10.212512288Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"RHSA-2021:1586","title":"Red Hat Security Advisory: GNOME security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:54:20Z","modified":"2026-06-26T12:21:16.186491781Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:1586","title":"Moderate: GNOME security, bug fix, and enhancement update","description":"GNOME is the default desktop environment of Rocky Linux.\n\nThe following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)\n\nSecurity Fix(es):\n\n* webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)\n\n* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)\n\n* webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)\n\n* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)\n\n* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)\n\n* glib2: insecure permissions for files and directories (CVE-2019-13012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:35:26Z","modified":"2026-02-05T15:00:06.781453Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-16125","description":"gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.","status":"published","published":"2020-11-03T00:00:00Z","modified":"2026-04-22T12:30:45.443459Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"ALSA-2021:1586","title":"Moderate: GNOME security, bug fix, and enhancement update","description":"GNOME is the default desktop environment of AlmaLinux.\n\nThe following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)\n\nSecurity Fix(es):\n\n* webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)\n\n* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)\n\n* webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)\n\n* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)\n\n* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)\n\n* glib2: insecure permissions for files and directories (CVE-2019-13012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:35:26Z","modified":"2026-10-29T11:12:06.757958217Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2434-1","title":"gdm3 - security update","status":"published","published":"2020-11-05T00:00:00Z","modified":"2026-03-09T01:19:57.4814Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2021-0003","title":"Updated gdm packages fix a security vulnerability","description":"Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool\nwhen the accountsservice daemon was not reachable. A local attacker able to\ncause accountsservice to crash or stop responding could trick GDM into\nlaunching the initial setup tool and create a privileged user (CVE-2020-16125).\n","status":"published","published":"2021-01-04T14:42:30Z","modified":"2026-04-16T04:44:35.189195351Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2020:1961-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- Exit with failure if loading existing users fails (bsc#1178150 CVE-2020-16125).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-11-18T22:58:49Z","modified":"2026-02-04T02:26:58.147792Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2264-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-12-15T11:44:05Z","modified":"2026-02-04T04:18:15.831302Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11547-1","title":"gdm-41.0-1.1 on GA media","description":"These are all security issues fixed in the gdm-41.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:55:21.630187Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:3333-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- Exit with failure if loading existing users fails (bsc#1178150 CVE-2020-16125).\n","status":"published","published":"2020-11-16T11:07:06Z","modified":"2026-02-04T02:36:47.381098Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3614-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).\n","status":"published","published":"2020-12-03T08:36:40Z","modified":"2026-02-04T03:33:45.239861Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2020:3799-1","title":"Security update for gdm","description":"This update for gdm fixes the following issues:\n\n- CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).\n","status":"published","published":"2020-12-14T17:55:47Z","modified":"2026-02-04T02:34:59.743499Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-4614-1","title":"gdm3 vulnerability","description":"Kevin Backhouse discovered that GDM incorrectly launched the initial setup\ntool when the accountsservice daemon was not reachable. A local attacker\nable to cause accountsservice to crash or stop responding could trick GDM\ninto launching the initial setup tool and create a privileged user.\n","status":"published","published":"2020-11-03T15:00:24Z","modified":"2026-04-27T15:48:42.048396Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}