Stay Secure with the Latest Linux Advisories

security advisorymoderateSUSE

SUSE: 2020:3132-1 Moderate: Gnome-Shell Auth Prompt Issue

An update that solves one vulnerability, contains one feature and has one errata is now available. . SUSE Security Update: Security update for gnome-settings-daemon, gnome-shell ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:3132-1 Rating: moderate References: #1172760 #1175155 SLE-16518 Cross-References: CVE-2020-17489 Affected Products: SUSE Linux Enterprise Workstation Extension 15-SP2 SUSE Linux Enterprise Module for Desktop Applications 15-SP2 ______________________________________________________________________________ An update that solves one vulnerability, contains one feature and has one errata is now available. Description: This update for gnome-settings-daemon, gnome-shell fixes the following issues: gnome-settings-daemon: - Add support for recent UCM related changes in ALSA and PulseAudio. (jsc#SLE-16518) - Don't warn when a default source or sink is missing and the PulseAudio daemon is restarting. (jsc#SLE-16518) - Don't warn about starting/stopping services which don't exist. (bsc#1172760). gnome-shell: - Add support for recent UCM related changes in ALSA and PulseAudio. (jsc#SLE-16518) - CVE-2020-17489: reset auth prompt on vt switch before fade in in loginDialog (bsc#1175155). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-WE-15-SP2-2020-3132=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-3132=1 Package List: - SUSE Linux Enterprise Workstation Extension 15-SP2 (x86_64): gnome-shell-calendar-3.34.5-3.13.1 gnome-shell-calendar-debuginfo-3.34.5-3.13.1 gnome-shell-debuginfo-3.34.5-3.13.1 gnome-shell-debugsource-3.34.5-3.13.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (aarch64 ppc64le s390x x86_64): gnome-settings-daemon-3.34.2+0-4.3.1 gnome-settings-daemon-debuginfo-3.34.2+0-4.3.1 gnome-settings-daemon-debugsource-3.34.2+0-4.3.1 gnome-settings-daemon-devel-3.34.2+0-4.3.1 gnome-shell-3.34.5-3.13.1 gnome-shell-debuginfo-3.34.5-3.13.1 gnome-shell-debugsource-3.34.5-3.13.1 gnome-shell-devel-3.34.5-3.13.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (noarch): gnome-settings-daemon-lang-3.34.2+0-4.3.1 gnome-shell-lang-3.34.5-3.13.1 References: https://www.suse.com/security/cve/CVE-2020-17489.html https://bugzilla.suse.com/1172760 https://bugzilla.suse.com/1175155 . SUSE Security Patch: Gnome-settings-daemon and gnome-shell enhancements addressing moderate vulnerabilities. See more information here.. SUSE Update, Gnome Security, Patch Instructions. . LinuxSecurity.com Team

Nov 03, 2020 SuSE