CVE-2000-0229: gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges...

Security readout for executives and security teams

This is an old Linux local privilege escalation issue in gpm-root. A user who already has local access may be able to make a tool launched by gpm-root run with higher privileges. It matters mainly for legacy systems still running vulnerable gpm packages. Exposure is likely limited to legacy Linux systems with vulnerable gpm/gpm-root packages installed. Modern systems or servers without gpm-root are unlikely to be affected, but the source bundle does not enumerate exact products or package builds. Prioritize as a legacy-system hygiene issue. It is not presented as remotely exploitable or actively exploited, but local privilege escalation can support deeper compromise if an attacker already has user access. Mitigation focus: Inventory systems for installed gpm and gpm-root packages.; Check Red Hat and SUSE advisories for vendor-fixed package versions.; Upgrade or remove vulnerable gpm packages where no longer needed..

Prepared

Jul 12, 2026, 04:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.