Gentoo Linux Security Advisory GLSA 200710-15 – Kees Huijgen discovered an error when checking the credentials which can lead to a login without specifying a password. This only occurs when auto login is configured for at least one user and a password is required to shut down the machine. Versions less than 3.5.7-r2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60122/glsa-200710-15.txt
Source: https://packetstormsecurity.com/files/60122/Gentoo-Linux-Security-Advisory-200710-15.html