lightdm-kde-greeter: Privilege Escalation from lightdm Service User to root in KAuth Helper Service (CVE-2025-62876)
security.opensuse.org
lightdm-kde-greeter is a KDE-themed greeter application for the lightdm display manager. It contains a KAuth-based D-Bus helper application for performing privileged operations, which suffers from a lightdm to root privilege escalation and some other shortcomings in versions up to 6.0.3. In discussions with upstream we managed to arrive at a much improved version of the affected code.

lightdm-kde-greeter is a KDE-themed greeter application for the lightdm display manager. At the beginning of September one of our community packagers asked us to review a D-Bus service contained in lightdm-kde-greeter for addition to openSUSE Tumbleweed.

In the course of the review we found a potential privilege escalation from the lightdm service user to root which is facilitated by this D-Bus service, among some other shortcomings in its implementation.

  • deafboy@lemmy.worldEnglish
    2·
    8 hours ago

    I feel like the opensuse is always on the outskirt when discussing distros, but their security reviews are often pretty brutal, in a good way.

    I have a deep respect for them ever since they ripped a new one to the deepin devs / packagers.