Oval Definition:oval:com.redhat.rhsa:def:20172128
Revision Date:2017-08-01Version:641
Title:RHSA-2017:2128: gdm and gnome-session security, bug fix, and enhancement update (Moderate)
Description:The GNOME Display Manager (GDM) provides the graphical login screen shown shortly after boot up, log out, and when user-switching.

  • The following packages have been upgraded to a later upstream version: gdm (3.22.3), gnome-session (3.22.3). (BZ#1386862, BZ#1386957)

    Security Fix(es):

  • It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is locked, possibly bypassing the locked screen. (CVE-2015-7496)

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2015-7496
    RHSA-2017:2128
    RHSA-2017:2128-01
    Platform(s):Red Hat Enterprise Linux 7
    Red Hat Enterprise Linux 7 (please do not use for >= RHEL-7.5)
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • gnome-session is earlier than 0:3.22.3-4.el7
  • AND gnome-session is signed with Red Hat redhatrelease2 key
  • gnome-session-custom-session is earlier than 0:3.22.3-4.el7
  • AND gnome-session-custom-session is signed with Red Hat redhatrelease2 key
  • gnome-session-xsession is earlier than 0:3.22.3-4.el7
  • AND gnome-session-xsession is signed with Red Hat redhatrelease2 key
  • gdm is earlier than 1:3.22.3-11.el7
  • AND gdm is signed with Red Hat redhatrelease2 key
  • gdm-devel is earlier than 1:3.22.3-11.el7
  • AND gdm-devel is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 7 Client is installed
  • OR Red Hat Enterprise Linux 7 Server is installed
  • OR Red Hat Enterprise Linux 7 Workstation is installed
  • OR Red Hat Enterprise Linux 7 ComputeNode is installed
  • AND Package Information
  • gnome-session-custom-session is earlier than 0:3.22.3-4.el7
  • AND gnome-session-custom-session is signed with Red Hat redhatrelease2 key
  • OR
  • gnome-session-xsession is earlier than 0:3.22.3-4.el7
  • AND gnome-session-xsession is signed with Red Hat redhatrelease2 key
  • OR
  • gnome-session is earlier than 0:3.22.3-4.el7
  • AND gnome-session is signed with Red Hat redhatrelease2 key
  • OR
  • gdm-devel is earlier than 1:3.22.3-11.el7
  • AND gdm-devel is signed with Red Hat redhatrelease2 key
  • OR
  • gdm is earlier than 1:3.22.3-11.el7
  • AND gdm is signed with Red Hat redhatrelease2 key
  • BACK