https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T11:16:35.993742+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-16125 CVE-2020-16125 — gdm3 would start gnome-initial-setup if it cannot contact accountservice 2026-10-02T11:16:36.795798+00:00

Affected: Gnome GDM3

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

 https://vulnerability.circl.lu/vuln/usn-4614-1 USN-4614-1 — gdm3 vulnerability 2026-10-02T11:16:36.795924+00:00

Affected: Ubuntu:18.04:LTS: gdm3, Ubuntu:20.04:LTS: gdm3

Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user.