Lucene search

K
suseSuseOPENSUSE-SU-2020:1861-1
HistoryNov 07, 2020 - 12:00 a.m.

Security update for gnome-settings-daemon, gnome-shell (moderate)

2020-11-0700:00:00
lists.opensuse.org
42

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for gnome-settings-daemon, gnome-shell fixes the following
issues:

gnome-settings-daemon:

  • Add support for recent UCM related changes in ALSA and PulseAudio.
    (jsc#SLE-16518)
  • Don’t warn when a default source or sink is missing and the PulseAudio
    daemon is restarting. (jsc#SLE-16518)
  • Don’t warn about starting/stopping services which don’t exist.
    (bsc#1172760).

gnome-shell:

  • Add support for recent UCM related changes in ALSA and PulseAudio.
    (jsc#SLE-16518)
  • CVE-2020-17489: reset auth prompt on vt switch before fade in in
    loginDialog (bsc#1175155).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2020-1861=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.2noarch< - openSUSE Leap 15.2 (noarch):- openSUSE Leap 15.2 (noarch):.noarch.rpm
openSUSE Leap15.2x86_64< - openSUSE Leap 15.2 (x86_64):- openSUSE Leap 15.2 (x86_64):.x86_64.rpm

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N