| Release | Version |
|---|---|
| jessie | 3.14.1-7+deb8u1 |
| stretch | 3.22.3-3+deb9u3 |
| buster | 3.30.2-3 |
| bullseye | 3.38.2.1-1 |
| bookworm | 43.0-3 |
| trixie | 47.0-3 |
| sid | 47.0-3 |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-27837 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | A flaw was found in GDM in versions prior to 3.38.2.1. A race conditio ... |
| CVE-2020-16125 | vulnerable | fixed | vulnerable (no DSA) | fixed | fixed | fixed | fixed | gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup ... |
| CVE-2019-3825 | vulnerable (no DSA, ignored) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | A vulnerability was discovered in gdm before 3.31.4. When timed login ... |
| CVE-2016-1000002 | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable | vulnerable | gdm3 3.14.2 and possibly later has an information leak before screen l ... |
| Bug | Description |
|---|---|
| CVE-2018-14424 | The daemon in GDM through 3.29.1 does not properly unexport display ob ... |
| CVE-2017-12164 | A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer se ... |
| CVE-2015-7496 | GNOME Display Manager (gdm) before 3.18.2 allows physically proximate ... |
| CVE-2013-7273 | GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list ... |
| CVE-2013-4169 | GNOME Display Manager (gdm) before 2.21.1 allows local users to change ... |
| CVE-2011-1709 | GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, ena ... |
| CVE-2011-0727 | GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to ch ... |
| DSA / DLA | Description |
|---|---|
| DLA-2434-1 | gdm3 - security update |
| DLA-1494-1 | gdm3 - security update |
| DSA-4270-1 | gdm3 - security update |
| DSA-2205-1 | gdm3 - privilege escalation |