Technical Description

A vulnerability has been identified in Fedora, which could be exploited by local attackers to cause a denial of service. This issue is caused by an error in GDM. For additional information, see : VUPEN/ADV-2007-2781

Affected Products

Fedora 7
Fedora Core 6

Solution

Upgrade the affected packages :

7472afda810a65c2e0d48b18322c1a4549581296 gdm-debuginfo-2.18.4-1.fc7.ppc64.rpm
5927a6435065cc608be63483eed8a3e701dc4693 gdm-extra-faces-2.18.4-1.fc7.ppc64.rpm
bce7fa92272ae87eb201f2f1992853b9ff1ff08e gdm-2.18.4-1.fc7.ppc64.rpm
c8cf04d04b060ff515350bdd8d31e329bc3440ee gdm-extra-faces-2.18.4-1.fc7.i386.rpm
a708986515973074ce43a3bb657e3aa83e2bbd9f gdm-debuginfo-2.18.4-1.fc7.i386.rpm
fd30915168956cb18f5b8f9c2c1f1ad88f5ed2c9 gdm-2.18.4-1.fc7.i386.rpm
286a0fea7ce9b21e0517fed3141ca8e1e459208b gdm-debuginfo-2.18.4-1.fc7.x86_64.rpm
139dc746e3e5bc06b66621a255c98c518174a7c0 gdm-2.18.4-1.fc7.x86_64.rpm
8c4bd659684632b16c8f725b1fea16189f8f9698 gdm-extra-faces-2.18.4-1.fc7.x86_64.rpm
be41ce6f4989be45c6fc8803f425fae2f719a8c3 gdm-debuginfo-2.18.4-1.fc7.ppc.rpm
ef92c79441e33abf141f6ea24f15095296e1e0c5 gdm-2.18.4-1.fc7.ppc.rpm
bd895ec4af9dd543b904fc2e29835fa63b7c2cf9 gdm-extra-faces-2.18.4-1.fc7.ppc.rpm
3b693f08837c73f774b2f302327738dd290c277e gdm-2.18.4-1.fc7.src.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

8325d217b3ec741c1db7c161e609cd60962cb604 SRPMS/gdm-2.16.5-2.fc6.src.rpm
8325d217b3ec741c1db7c161e609cd60962cb604 noarch/gdm-2.16.5-2.fc6.src.rpm
f685bec86148df07b3e9a7f6d7de79fd6a6a66e4 ppc/gdm-2.16.5-2.fc6.ppc.rpm
8c083e9c40e8162e395f25df8d653afd697992f9 ppc/debug/gdm-debuginfo-2.16.5-2.fc6.ppc.rpm
01892c82ea8f333a83bb147dfa4ede56d8cd14e1 x86_64/gdm-2.16.5-2.fc6.x86_64.rpm
2a8e11a3ef4b1b86b831c1e046762763579a72a8 x86_64/debug/gdm-debuginfo-2.16.5-2.fc6.x86_64.rpm
7f4cbe4fd16a6107f20d76230c535c8f11bf9d40 i386/debug/gdm-debuginfo-2.16.5-2.fc6.i386.rpm
9f3f94be542c821e36f920cc5d218d730bbf4562 i386/gdm-2.16.5-2.fc6.i386.rpm

References

http://www.vupen.com/english/advisories/2007/2789
https://www.redhat.com/archives/fedora-package-announce/2007-July/msg00564.html
https://www.redhat.com/archives/fedora-package-announce/2007-August/msg00029.html

ChangeLog

2007-08-07 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.