Lucene search

CentOS ProjectCESA-2020:1021

HistoryApr 08, 2020 - 5:41 p.m.

LibRaw, accountsservice, colord, control, gdm, gnome, gsettings, gtk, gtk3, libcanberra, libgweather, mutter, nautilus, osinfo, shared, tracker, xchat security update

2020-04-0817:41:15

CentOS Project

lists.centos.org

118

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

5 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

43.7%

JSON

CentOS Errata and Security Advisory CESA-2020:1021

GNOME is the default desktop environment of Red Hat Enterprise Linux.

Security Fix(es):

gnome-shell: partial lock screen bypass (CVE-2019-3820)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.

Affected packages:
LibRaw
LibRaw-devel
LibRaw-static
accountsservice
accountsservice-devel
accountsservice-libs
colord
colord-devel
colord-devel-docs
colord-extra-profiles
colord-libs
control-center
control-center-filesystem
gdm
gdm-devel
gdm-pam-extensions-devel
gnome-classic-session
gnome-online-accounts
gnome-online-accounts-devel
gnome-settings-daemon
gnome-settings-daemon-devel
gnome-shell
gnome-shell-extension-alternate-tab
gnome-shell-extension-apps-menu
gnome-shell-extension-auto-move-windows
gnome-shell-extension-common
gnome-shell-extension-dash-to-dock
gnome-shell-extension-disable-screenshield
gnome-shell-extension-drive-menu
gnome-shell-extension-extra-osk-keys
gnome-shell-extension-horizontal-workspaces
gnome-shell-extension-launch-new-instance
gnome-shell-extension-native-window-placement
gnome-shell-extension-no-hot-corner
gnome-shell-extension-panel-favorites
gnome-shell-extension-places-menu
gnome-shell-extension-screenshot-window-sizer
gnome-shell-extension-systemMonitor
gnome-shell-extension-top-icons
gnome-shell-extension-updates-dialog
gnome-shell-extension-user-theme
gnome-shell-extension-window-grouper
gnome-shell-extension-window-list
gnome-shell-extension-windowsNavigator
gnome-shell-extension-workspace-indicator
gnome-tweak-tool
gsettings-desktop-schemas
gsettings-desktop-schemas-devel
gtk-update-icon-cache
gtk3
gtk3-devel
gtk3-devel-docs
gtk3-immodule-xim
gtk3-immodules
gtk3-tests
libcanberra
libcanberra-devel
libcanberra-gtk2
libcanberra-gtk3
libgweather
libgweather-devel
mutter
mutter-devel
nautilus
nautilus-devel
nautilus-extensions
osinfo-db
shared-mime-info
tracker
tracker-devel
tracker-docs
tracker-needle
tracker-preferences
xchat
xchat-tcl

Upstream details at:
https://access.redhat.com/errata/RHSA-2020:1021

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64accountsservice< 0.6.50-7.el7accountsservice-0.6.50-7.el7.x86_64.rpm
CentOS7i686accountsservice-devel< 0.6.50-7.el7accountsservice-devel-0.6.50-7.el7.i686.rpm
CentOS7x86_64accountsservice-devel< 0.6.50-7.el7accountsservice-devel-0.6.50-7.el7.x86_64.rpm
CentOS7i686accountsservice-libs< 0.6.50-7.el7accountsservice-libs-0.6.50-7.el7.i686.rpm
CentOS7x86_64accountsservice-libs< 0.6.50-7.el7accountsservice-libs-0.6.50-7.el7.x86_64.rpm
CentOS7x86_64colord< 1.3.4-2.el7colord-1.3.4-2.el7.x86_64.rpm
CentOS7i686colord-devel< 1.3.4-2.el7colord-devel-1.3.4-2.el7.i686.rpm
CentOS7x86_64colord-devel< 1.3.4-2.el7colord-devel-1.3.4-2.el7.x86_64.rpm
CentOS7noarchcolord-devel-docs< 1.3.4-2.el7colord-devel-docs-1.3.4-2.el7.noarch.rpm
CentOS7noarchcolord-extra-profiles< 1.3.4-2.el7colord-extra-profiles-1.3.4-2.el7.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	7	x86_64	accountsservice	< 0.6.50-7.el7	accountsservice-0.6.50-7.el7.x86_64.rpm
CentOS	7	i686	accountsservice-devel	< 0.6.50-7.el7	accountsservice-devel-0.6.50-7.el7.i686.rpm
CentOS	7	x86_64	accountsservice-devel	< 0.6.50-7.el7	accountsservice-devel-0.6.50-7.el7.x86_64.rpm
CentOS	7	i686	accountsservice-libs	< 0.6.50-7.el7	accountsservice-libs-0.6.50-7.el7.i686.rpm
CentOS	7	x86_64	accountsservice-libs	< 0.6.50-7.el7	accountsservice-libs-0.6.50-7.el7.x86_64.rpm
CentOS	7	x86_64	colord	< 1.3.4-2.el7	colord-1.3.4-2.el7.x86_64.rpm
CentOS	7	i686	colord-devel	< 1.3.4-2.el7	colord-devel-1.3.4-2.el7.i686.rpm
CentOS	7	x86_64	colord-devel	< 1.3.4-2.el7	colord-devel-1.3.4-2.el7.x86_64.rpm
CentOS	7	noarch	colord-devel-docs	< 1.3.4-2.el7	colord-devel-docs-1.3.4-2.el7.noarch.rpm
CentOS	7	noarch	colord-extra-profiles	< 1.3.4-2.el7	colord-extra-profiles-1.3.4-2.el7.noarch.rpm