The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Mar 31, 2011 |
| Freebsd | — | Upgrade gdm | Dec 10, 2025 | Mar 29, 2011 |
| Gentoo Linux | — | Upgrade sys-apps/shadow.Upgrade media-sound/lastfmplayer.Upgrade gnome-base/gdm.Upgrade app-admin/syslog-ng.Upgrade net-misc/mrouted.Upgrade dev-util/qt-creator.Upgrade games-sports/racer-bin.Upgrade app-misc/ca-certificates.Upgrade dev-libs/xmlsec.Upgrade net-libs/libsoup.Upgrade dev-util/oprofile.Upgrade sys-cluster/resource-agents.Upgrade net-libs/webkit-gtk.Upgrade dev-php/PEAR-PEAR.Upgrade x11-apps/xrdb.Upgrade media-libs/fmod.Upgrade dev-vcs/gitolite.Upgrade media-libs/xine-lib.Upgrade app-office/gnucash.Upgrade net-analyzer/sflowtool.Upgrade dev-db/unixODBC.Upgrade net-misc/rsync.Upgrade dev-php/PEAR-Mail.Upgrade net-misc/vino.Upgrade sys-fs/lvm2. | Oct 30, 2017 | Mar 31, 2011 |
| Oracle_linux | — | Upgrade gdm-user-switch-appletUpgrade gdm-plugin-smartcardUpgrade gdmUpgrade gdm-plugin-fingerprintUpgrade gdm-libs | Oct 16, 2024 | Mar 31, 2011 |
| Suse | — | Upgrade gdm-langUpgrade gdmUpgrade gnome-applets-gdmUpgrade gdm-branding-upstream | Feb 17, 2015 | Mar 31, 2011 |
| Ubuntu | — | Upgrade gdm | Nov 8, 2024 | Mar 31, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub