In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gnome-keyring | Jul 30, 2024 | Feb 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gnome-keyringUpgrade gnome-keyring-pam | Feb 22, 2021 | Feb 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gnome-keyring-pamUpgrade gnome-keyring | Jan 20, 2021 | Feb 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gnome-keyring-pamUpgrade gnome-keyring | Nov 2, 2020 | Feb 12, 2019 |
| Oracle Solaris | — | Upgrade library/gnome/gcr to version 3.33.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade gnome/gnome-keyring to version 3.34.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Feb 12, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 12, 2019 |
| Ubuntu | — | Upgrade libpam-gnome-keyringUpgrade gnome-keyring | Mar 6, 2019 | Feb 12, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub