Description
GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | gdm +1 | 1:2.16.0-59.el5_9.1 | RHSA-2013:1213 |
| RHEL 5 | initscripts | 8.45.42-2.el5_9.1 | RHSA-2013:1213 |
Advisories 1
- RHSA-2013:1213 Red Hat Security Advisory: gdm security update Red Hat Security Advisories (RHSA) · Mar 19, 2026
References
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=988498
- 54661 third-party-advisory
- RHSA-2013:1213 vendor-advisory