---------------------------------------------------------------------- Secunia is proud to announce the availability of the Secunia Software Inspector. The Secunia Software Inspector is a free service that detects insecure versions of software that you may have installed in your system. When insecure versions are detected, the Secunia Software Inspector also provides thorough guidelines for updating the software to the latest secure version from the vendor. Try it out online: http://secunia.com/software_inspector/ ---------------------------------------------------------------------- TITLE: Mandriva update for gdm SECUNIA ADVISORY ID: SA23381 VERIFY ADVISORY: http://secunia.com/advisories/23381/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Mandriva Linux 2007 http://secunia.com/product/12165/ DESCRIPTION: Mandriva has issued an update for gdm. This fixes a vulnerability, which can be exploited by malicious, local users to gain escalated privileges. For more information: SA23387 SOLUTION: Apply updated packages. Mandriva Linux 2007 fa245d14d410ec1447e416bfa83e8f8b 2007.0/i586/gdm-2.16.0-2.1mdv2007.0.i586.rpm aa3e3845491fec59b81e3dfd3002926d 2007.0/i586/gdm-Xnest-2.16.0-2.1mdv2007.0.i586.rpm 5b0f4d242a3e34d7ab9b8fe1098ec226 2007.0/SRPMS/gdm-2.16.0-2.1mdv2007.0.src.rpm Mandriva Linux 2007/X86_64 9fcd84e9208055d8692931528f52b0d3 2007.0/x86_64/gdm-2.16.0-2.1mdv2007.0.x86_64.rpm 5b2499806469f41f6c32a59102212994 2007.0/x86_64/gdm-Xnest-2.16.0-2.1mdv2007.0.x86_64.rpm 5b0f4d242a3e34d7ab9b8fe1098ec226 2007.0/SRPMS/gdm-2.16.0-2.1mdv2007.0.src.rpm ORIGINAL ADVISORY: http://www.mandriva.com/security/advisories?name=MDKSA-2006:231 OTHER REFERENCES: SA23387: http://secunia.com/advisories/23387/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------