Lucene search

K
oraclelinuxOracleLinuxELSA-2021-4381
HistoryNov 16, 2021 - 12:00 a.m.

GNOME security, bug fix, and enhancement update

2021-11-1600:00:00
linux.oracle.com
69

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

accountsservice
[0.6.55-2]

  • Add support for user templates so user can specify default session
    Resolves: #1812788
    gdm
    [40.0-14]
  • Fix XDMCP
    Resolves: #2004170
  • Fix crash at shutdown
    Related: #2004170
    [40.0-13]
  • Disable Wayland on HyperV
  • Fix Xorg fallback
    Related: #1998989
    [40.0-12]
  • Redisable on server chips since rebase
    Related: #1909300
    [40.0-11]
  • Read session settings from users even if theyve never saved
    before. Needed to support accountsservice templated user
    defaults.
    Related: #1812788
    [40.0-10]
  • Let customers using vendor nvidia driver choose wayland sessions
    Resolves: #1962211
  • Drop unused patches
    [40.0-3]
  • Disable network items on login screen
    Resolves: #1935261
    [40.0-2]
  • Fix workaround for systemd bug thats breaking X11 fallback
    Resolves: #1962049
    [40.0-1]
  • Rebase to 40.0
    Resolves: #1909300
    gnome-autoar
    [0.2.3-2]
  • CVE-2020-36241, CVE-2021-28650: Do not allow symlink in parents (rhbz#1928701)
    gnome-calculator
    [3.28.2-2]
  • Allow disabling downloading by setting refresh interval to 0
    Resolves: #1957705
    gnome-control-center
    [3.28.2-28]
  • Update pt_BR translations
  • Resolves: #1978612
    gnome-online-accounts
    [3.28.2-3]
  • Disable the Facebook and Foursquare providers
    Resolves: #1951086, #1952136
    gnome-session
    [3.28.1-13.0.1]
  • Update kiosk-session subpackage with Oracle references [Orabug: 32095108]
    [3.28.1-13]
  • Add patch to tell grub boot was successful when user is
    able to explicitly request shutdown/reboot.
    Resolves: #1914925
    [3.28.1-12]
  • Introduce gnome-wayland session to allow users that use
    Xorg on the login screen to try wayland for the user session.
    Related: #1962211
    [3.28.1-11]
  • Exclude kiosk-session from xsession subpackage
  • Disable VT switching when kiosk-session is installed
    Related: #1955754
    gnome-settings-daemon
    [3.32.0-16]
  • Update pt_BR translations
  • Resolves: #1978612
    [3.32.0-15]
  • Keep auto-logout working inside VMs
    Resolves: #1904139
    gnome-shell
    [3.32.2-40]
  • Add bugs introduced in backport for #1651378
    Related: #1999758
  • Tidy up patch list a bit
    [3.32.2-39]
  • Allow extensions on the login screen
    Related: #1651378
    [3.32.2-38]
  • Only mask text in password entries
    Resolves: #1987233
    [3.32.2-37]
  • Only warn once when not running under GDM
    Resolves: #1980661
    [3.32.2-36]
  • Add ability to lock down password showing
    Resolves: #1770302
  • Add requires on newer mutter version
    Related: #1937866
    [3.32.2-35]
  • Improve style of window preview close buttons
    Resolves: #1981420
    [3.32.2-34]
  • Add PolicyKit-authentication-agent virtual provides
    Resolves: #1978287
    [3.32.2-33]
  • Fix warnings on unlock
    Resolves: #1971534
  • Fix gdm lock screen
    Resolves: #1971507
    [3.32.2-32]
  • Fix network secret requests on login screen
    Related: #1935261
    [3.32.2-31]
  • Backport of touch mode
    Resolves: #1937866
    gnome-shell-extensions
    [3.32.1-20]
  • Add extension for displaying heads up message
    Related: #1651378
    [3.32.1-19]
  • Dont use status icon wm_class as top bar role
    Resolves: #1897932
    [3.32.1-18]
  • Add gesture-inhibitor extension
    Resolves: #1854679
    [3.32.1-17]
  • Handle touchscreens on Wayland in the desktop-icons extension
    Resolves: #1924725
    [3.32.1-16]
  • Fix opening files with (wrongly) set executable bit
    Resolves: #1813727
    gnome-software
    [3.36.1-10]
  • Resolves: #1978505 (Development package is missing important header files)
    [3.36.1-9]
  • Resolves: #1972545 (flatpak: Prefer runtime from the same origin as the application)
    [3.36.1-8]
  • Resolves: #1888404 (Updates page hides ongoing updates on refresh)
    [3.36.1-7]
  • Resolves: #1873297 (Crash when run as root)
    [3.36.1-6]
  • Resolves: #1791478 (Cannot completely disable ODRS (GNOME Ratings))
    gsettings-desktop-schemas
    [3.32.0-6]
  • Add setting for locking down Show Password in entries
    Related: #1770302
    gtk3
    [3.22.30-8]
  • Make reftests work in a vm
    [3.22.30-7]
  • Only mention Emoji in context menus when requested (rhbz#1893196)
  • Fix warnings from non-overlay scrollbars (rhbz#1873488)
    LibRaw
    [0.19.5-3]
  • Backport fix for CVE-2020-24870 from upstream
    Resolves: #1931841
    mutter
    [3.32.2-60]
  • Backport fix avoiding DND regression
    Resolves: #1999120
    [3.32.2-59]
  • Backport fixes avoiding frozen partly off-screen clients
    Resolves: #1989035
    [3.32.2-58]
  • Backport xauth and xhost patches
    Resolves: #1949176
    vino
    [3.22.0-11]
  • Fix crashes under FIPS
  • Resolves: #1960705
    webkit2gtk3
    [2.32.3-2]
  • Fix CVE-2021-30858
  • Resolves: #2006428
    [2.32.3-1]
  • Update to 2.32.3
  • Related: #1937416
    [2.32.2-1]
  • Update to 2.32.2
  • Related: #1937416
    [2.32.1-1]
  • Update to 2.32.1
  • Related: #1937416
    [2.32.0-1]
  • Update to 2.32.0
  • Related: #1937416

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C