Ubuntu Security Notice USN-1142-1

Ubuntu Security Notice 1142-1 – Henne Vogelsang discovered that under certain PolicyKit configurations, GDM could be made to launch a browser. A local attacker could exploit this to gain access to files with the privileges of the gdm user. PolicyKit is not configured in this manner in Ubuntu by default.

Source: Ubuntu Security Notice USN-1142-1