[SECURITY] [DSA 1040-1] New gdm packages fix local root exploit

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publisherlists.debian.org

Article IDNo stable ID in source URL

Verified snapshot21 Oct 2026, 20:03 UTC

Linked CVEs1

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2006-1057Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file

Source and provenance

Original title: [SECURITY] [DSA 1040-1] New gdm packages fix local root exploit. Captured 21 Oct 2026, 20:03 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗