Skip to content
OpenAdvisories
High DLA-2434-1 1 CVE

gdm3 - security update

Published Nov 5, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 gdm3 3.22.3-3+deb9u3

Vulnerabilities 1

  • High 7.2
    CVE-2020-16125 Public exploit

    gdm3 would start gnome-initial-setup if it cannot contact accountservice

    gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a lo…

    GNOME GDM3 gdm3 gdm3 Debian Ubuntu