Synopsis

Moderate: gdm security update

Type/Severity

Security Advisory: Moderate

Topic

Updated gdm packages that fix one security issue are now available for Red
Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

The GNOME Display Manager (GDM) provides the graphical login screen, shown
shortly after boot up, log out, and when user-switching.

A race condition flaw was found in the way GDM handled the cache
directories used to store users' dmrc and face icon files. A local attacker
could use this flaw to trick GDM into changing the ownership of an
arbitrary file via a symbolic link attack, allowing them to escalate their
privileges. (CVE-2011-0727)

Red Hat would like to thank Sebastian Krahmer of the SuSE Security Team for
reporting this issue.

All users should upgrade to these updated packages, which contain a
backported patch to correct this issue. GDM must be restarted for this
update to take effect. Rebooting achieves this, but changing the runlevel
from 5 to 3 and back to 5 also restarts GDM.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 688323 - CVE-2011-0727 gdm: privilege escalation vulnerability

CVEs

• CVE-2011-0727

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 6

SRPM
gdm-2.30.4-21.el6_0.1.src.rpm	SHA-256: 81fb4faf76fa9365412867ae815a90e8b476be838a07adfef7c17a537cc14ba2
x86_64
gdm-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 58eef655762dfc29414b4242f5b2813f0afdd0285fbd6b9669fe584df81a614d
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-debuginfo-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 20b1c422ea4018b5dc1ff501f4f7b76467e0a8dfe078b3de2dff2329405b20bb
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-libs-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: d8672eb88adb668e97dbfeab8610e6933dd29e6fe3eeda2fca105109e8a86b38
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 52e473274b5c7274965e8fae6c5a5e80fc44f4eeb16171daaa97cf7fbe91ac35
gdm-plugin-smartcard-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: a2ba4642622eccf78dc9b075f79bc801eaaa6fa4f6796a2e282cf75f4b459330
gdm-user-switch-applet-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 36461e940a5cab8b184ae346f7514728c2e00c21749a4e91343a6ba922c45407
i386
gdm-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 2adee4890a26d29a8f91f4b132626e2751de0e22f12f99f31e53435dc35174e1
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 6883768b30da5dfe3e7ea4a61826f445b91a48da8829224d7205c2d839545171
gdm-plugin-smartcard-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 0e3eea7023b213ba32a6984e9e7b95db2d8661686e608180091d4c82bb0e4aa4
gdm-user-switch-applet-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 83e435d3c991163f485f33384778ee22124c3d530a51b5512f4bb47c85011efb

Red Hat Enterprise Linux Workstation 6

SRPM
gdm-2.30.4-21.el6_0.1.src.rpm	SHA-256: 81fb4faf76fa9365412867ae815a90e8b476be838a07adfef7c17a537cc14ba2
x86_64
gdm-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 58eef655762dfc29414b4242f5b2813f0afdd0285fbd6b9669fe584df81a614d
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-debuginfo-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 20b1c422ea4018b5dc1ff501f4f7b76467e0a8dfe078b3de2dff2329405b20bb
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-libs-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: d8672eb88adb668e97dbfeab8610e6933dd29e6fe3eeda2fca105109e8a86b38
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 52e473274b5c7274965e8fae6c5a5e80fc44f4eeb16171daaa97cf7fbe91ac35
gdm-plugin-smartcard-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: a2ba4642622eccf78dc9b075f79bc801eaaa6fa4f6796a2e282cf75f4b459330
gdm-user-switch-applet-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 36461e940a5cab8b184ae346f7514728c2e00c21749a4e91343a6ba922c45407
i386
gdm-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 2adee4890a26d29a8f91f4b132626e2751de0e22f12f99f31e53435dc35174e1
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 6883768b30da5dfe3e7ea4a61826f445b91a48da8829224d7205c2d839545171
gdm-plugin-smartcard-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 0e3eea7023b213ba32a6984e9e7b95db2d8661686e608180091d4c82bb0e4aa4
gdm-user-switch-applet-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 83e435d3c991163f485f33384778ee22124c3d530a51b5512f4bb47c85011efb

Red Hat Enterprise Linux Desktop 6

SRPM
gdm-2.30.4-21.el6_0.1.src.rpm	SHA-256: 81fb4faf76fa9365412867ae815a90e8b476be838a07adfef7c17a537cc14ba2
x86_64
gdm-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 58eef655762dfc29414b4242f5b2813f0afdd0285fbd6b9669fe584df81a614d
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-debuginfo-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 20b1c422ea4018b5dc1ff501f4f7b76467e0a8dfe078b3de2dff2329405b20bb
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-libs-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: d8672eb88adb668e97dbfeab8610e6933dd29e6fe3eeda2fca105109e8a86b38
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 52e473274b5c7274965e8fae6c5a5e80fc44f4eeb16171daaa97cf7fbe91ac35
gdm-plugin-smartcard-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: a2ba4642622eccf78dc9b075f79bc801eaaa6fa4f6796a2e282cf75f4b459330
gdm-user-switch-applet-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 36461e940a5cab8b184ae346f7514728c2e00c21749a4e91343a6ba922c45407
i386
gdm-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 2adee4890a26d29a8f91f4b132626e2751de0e22f12f99f31e53435dc35174e1
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 6883768b30da5dfe3e7ea4a61826f445b91a48da8829224d7205c2d839545171
gdm-plugin-smartcard-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 0e3eea7023b213ba32a6984e9e7b95db2d8661686e608180091d4c82bb0e4aa4
gdm-user-switch-applet-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 83e435d3c991163f485f33384778ee22124c3d530a51b5512f4bb47c85011efb

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
gdm-2.30.4-21.el6_0.1.src.rpm	SHA-256: 81fb4faf76fa9365412867ae815a90e8b476be838a07adfef7c17a537cc14ba2
s390x
gdm-2.30.4-21.el6_0.1.s390x.rpm	SHA-256: 1347b3da3f31298bd2870f6f369e6ce7c456d5e694be19e4825d500add7cbf3d
gdm-debuginfo-2.30.4-21.el6_0.1.s390.rpm	SHA-256: 5a50d567d9fc5c807d9030b49662b4a3b5db73637d99f21c0f4bb8fb24335e03
gdm-debuginfo-2.30.4-21.el6_0.1.s390x.rpm	SHA-256: 1c4b57cd8e9340fa66b77f28f31fc969c2b20a2cbac45c466449b719ffd3e5bf
gdm-libs-2.30.4-21.el6_0.1.s390.rpm	SHA-256: 79428e2f2f703732f78fa5f4b317dbc2f106eacda67c29f73d20cb1aa78b116f
gdm-libs-2.30.4-21.el6_0.1.s390x.rpm	SHA-256: 20b199977a32bab215b2e64681e646d95ddeecfe452422a0cbc68224c1d1bf51
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.s390x.rpm	SHA-256: c0118aaa3b9656adac64216b03f18e4c07fe831d6f67f7f7513e2f3f4ad4469c
gdm-plugin-smartcard-2.30.4-21.el6_0.1.s390x.rpm	SHA-256: 9c3dd2c9a339ec130664e38a1b19d6aaedff34bd7701ed5a0f85a2b424148c7c
gdm-user-switch-applet-2.30.4-21.el6_0.1.s390x.rpm	SHA-256: 3e3cb32c811f03a94245673621de1465db85b89c82e82a843feb47a183b80a63

Red Hat Enterprise Linux for Power, big endian 6

SRPM
gdm-2.30.4-21.el6_0.1.src.rpm	SHA-256: 81fb4faf76fa9365412867ae815a90e8b476be838a07adfef7c17a537cc14ba2
ppc64
gdm-2.30.4-21.el6_0.1.ppc64.rpm	SHA-256: 817acaac58d009bda3f773ad9c33e95cd134c0d286007048945e9f18c8ba0790
gdm-debuginfo-2.30.4-21.el6_0.1.ppc.rpm	SHA-256: 6b41a60b499bb7b16d19880f254b60d9d34686a7c3633cf583d0bcaee0f61b4b
gdm-debuginfo-2.30.4-21.el6_0.1.ppc64.rpm	SHA-256: a5899112167a62b9fe35475c7870101cb4e553a108b9958f44c375135912bf9b
gdm-libs-2.30.4-21.el6_0.1.ppc.rpm	SHA-256: e2d16e7fecc6230424d7f16df541d016a5e555dec366604d41bc15d8242956c1
gdm-libs-2.30.4-21.el6_0.1.ppc64.rpm	SHA-256: db10f9f7a31895e67d8ad04fd1b0452d0cb4f024dc0d685103976f5ab352b1e5
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.ppc64.rpm	SHA-256: d4c151fa3e3603213e32451a242d656499f5bc4bf6a140edead81639256b9849
gdm-plugin-smartcard-2.30.4-21.el6_0.1.ppc64.rpm	SHA-256: 2b1da77d0043b1bdc1f95a5a08732f5a85355f91bf335f100929e3aebf9f60e0
gdm-user-switch-applet-2.30.4-21.el6_0.1.ppc64.rpm	SHA-256: 430a2e686bb90b918f2c175869af9ab6f3f5ef2a4ea7b83a3b9889e4f619b38a

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
gdm-2.30.4-21.el6_0.1.src.rpm	SHA-256: 81fb4faf76fa9365412867ae815a90e8b476be838a07adfef7c17a537cc14ba2
x86_64
gdm-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 58eef655762dfc29414b4242f5b2813f0afdd0285fbd6b9669fe584df81a614d
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-debuginfo-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 20b1c422ea4018b5dc1ff501f4f7b76467e0a8dfe078b3de2dff2329405b20bb
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-libs-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: d8672eb88adb668e97dbfeab8610e6933dd29e6fe3eeda2fca105109e8a86b38
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 52e473274b5c7274965e8fae6c5a5e80fc44f4eeb16171daaa97cf7fbe91ac35
gdm-plugin-smartcard-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: a2ba4642622eccf78dc9b075f79bc801eaaa6fa4f6796a2e282cf75f4b459330
gdm-user-switch-applet-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 36461e940a5cab8b184ae346f7514728c2e00c21749a4e91343a6ba922c45407

Red Hat Enterprise Linux Server from RHUI 6

SRPM
gdm-2.30.4-21.el6_0.1.src.rpm	SHA-256: 81fb4faf76fa9365412867ae815a90e8b476be838a07adfef7c17a537cc14ba2
x86_64
gdm-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 58eef655762dfc29414b4242f5b2813f0afdd0285fbd6b9669fe584df81a614d
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-debuginfo-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 20b1c422ea4018b5dc1ff501f4f7b76467e0a8dfe078b3de2dff2329405b20bb
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-libs-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: d8672eb88adb668e97dbfeab8610e6933dd29e6fe3eeda2fca105109e8a86b38
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 52e473274b5c7274965e8fae6c5a5e80fc44f4eeb16171daaa97cf7fbe91ac35
gdm-plugin-smartcard-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: a2ba4642622eccf78dc9b075f79bc801eaaa6fa4f6796a2e282cf75f4b459330
gdm-user-switch-applet-2.30.4-21.el6_0.1.x86_64.rpm	SHA-256: 36461e940a5cab8b184ae346f7514728c2e00c21749a4e91343a6ba922c45407
i386
gdm-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 2adee4890a26d29a8f91f4b132626e2751de0e22f12f99f31e53435dc35174e1
gdm-debuginfo-2.30.4-21.el6_0.1.i686.rpm	SHA-256: c2a025fe10ff2108840082fd4224e4461bbda407afc2c3996d89c1fcb9977302
gdm-libs-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 454df874c524382a830a7bb9492066deaa049f54ec2b1adff6d31690a1903971
gdm-plugin-fingerprint-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 6883768b30da5dfe3e7ea4a61826f445b91a48da8829224d7205c2d839545171
gdm-plugin-smartcard-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 0e3eea7023b213ba32a6984e9e7b95db2d8661686e608180091d4c82bb0e4aa4
gdm-user-switch-applet-2.30.4-21.el6_0.1.i686.rpm	SHA-256: 83e435d3c991163f485f33384778ee22124c3d530a51b5512f4bb47c85011efb