Bug#849432: gdm3: CVE-2016-1000002: Information leak before screen lock

Salvatore Bonaccorso carnil at debian.org
Tue Dec 27 05:08:43 UTC 2016


Source: gdm3
Version: 3.14.1-7
Severity: important
Tags: upstream security
Forwarded: https://bugzilla.gnome.org/show_bug.cgi?id=753678

Hi,

the following vulnerability was published for gdm3. Filling the issue
so that we have a reference as well in the BTS. Laurent Bigonville
confirmed it is reproducible with different GPUs, so it might not be
only a glitch from the graphic stack.

CVE-2016-1000002[0]:
No description was found (try on a search engine)

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-1000002
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000002
[1] https://bugzilla.gnome.org/show_bug.cgi?id=753678
[2] https://bugzilla.gnome.org/show_bug.cgi?id=776051

Regards,
Salvatore



More information about the pkg-gnome-maintainers mailing list