? vuxml-gdm.diff Index: vuln.xml =================================================================== RCS file: /home/pcvs/ports/security/vuxml/vuln.xml,v retrieving revision 1.2334 diff -a -u -r1.2334 vuln.xml --- vuln.xml 26 Mar 2011 20:13:47 -0000 1.2334 +++ vuln.xml 29 Mar 2011 12:57:47 -0000 @@ -34,6 +34,38 @@ --> + + gdm -- privilege escalation vulnerability + + + gdm + 2.30.5_2 + + + + +

Sebastian Krahmer reports:

+
It was discovered that the GNOME Display Manager (gdm) cleared the cache + directory, which is owned by an unprivileged user, with the privileges of the + root user. A race condition exists in gdm where a local user could take + advantage of this by writing to the cache directory between ending the session + and the signal to clean up the session, which could lead to the execution of + arbitrary code as the root user. +

+ + + + CVE-2011-0727 + http://mail.gnome.org/archives/distributor-list/2011-March/msg00008.html + https://bugzilla.redhat.com/show_bug.cgi?id=688323 + + + 2011-03-28 + 2011-03-29 + + + php -- ZipArchive segfault with FL_UNCHANGED on empty archive