----------------------------------------------------------------------

Secunia is proud to announce the availability of the Secunia Software
Inspector.

The Secunia Software Inspector is a free service that detects insecure
versions of software that you may have installed in your system. When
insecure versions are detected, the Secunia Software Inspector also
provides thorough guidelines for updating the software to the latest
secure version from the vendor.

Try it out online:
http://secunia.com/software_inspector/

----------------------------------------------------------------------

TITLE:
Ubuntu update for gdm

SECUNIA ADVISORY ID:
SA23385

VERIFY ADVISORY:
http://secunia.com/advisories/23385/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
>From remote

OPERATING SYSTEM:
Ubuntu Linux 6.06
http://secunia.com/product/10611/
Ubuntu Linux 6.10
http://secunia.com/product/12470/

DESCRIPTION:
Ubuntu has issued an update for gdm. This fixes a vulnerability,
which can be exploited by malicious, local users to gain escalated
privileges.

For more information:
SA23387

SOLUTION:
Apply updated packages.

-- Ubuntu 6.06 LTS --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1.diff.gz
Size/MD5: 75226 062d37bcd1e10af4ed62467cb411cd2a
http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1.dsc
Size/MD5: 886 85410f15a0ac5d3e78afd528675bb070
http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10.orig.tar.gz
Size/MD5: 4699371 5a3767866e33bab2f553eccaa448b260

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1_amd64.deb
Size/MD5: 1788460 d2ab3139edb370415541b32dc2ff8224

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1_i386.deb
Size/MD5: 1722546 ac6d2fbc6e6ff9979543a6a0f9ab755e

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1_powerpc.deb
Size/MD5: 1771750 77cf61ea08fa7f6fa9541cf3555aefae

sparc architecture (Sun SPARC/UltraSPARC)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.14.10-0ubuntu1.1_sparc.deb
Size/MD5: 1732952 0c9d3b1b35c0003a8ec9555620bb86fd

-- Ubuntu 6.10 --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1.diff.gz
Size/MD5: 78060 309e27f53d2461f82fd6345e218adc15
http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1.dsc
Size/MD5: 883 c2d212cf7792747c0402b94bfbb6aed5
http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1.orig.tar.gz
Size/MD5: 4878838 a2e68fac4763f1cf1050eeb19accb43f

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1_amd64.deb
Size/MD5: 1774968 f616e84bcdb3e14a36971d83f43ab7c3

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1_i386.deb
Size/MD5: 1727524 9a2cbc1b3977738e32f506cf5cfc1617

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1_powerpc.deb
Size/MD5: 1762732 fc833e0417bbc5d785ae653d12bd904f

sparc architecture (Sun SPARC/UltraSPARC)

http://security.ubuntu.com/ubuntu/pool/main/g/gdm/gdm_2.16.1-0ubuntu4.1_sparc.deb
Size/MD5: 1723264 6ba26002800130986e94d112d839fedf

ORIGINAL ADVISORY:
http://www.ubuntu.com/usn/usn-396-1

OTHER REFERENCES:
SA23387:
http://secunia.com/advisories/23387/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------