openSUSE Security Update: Security update for gnome-settings-daemon, gnome-shell
______________________________________________________________________________
Announcement ID: openSUSE-SU-2020:1861-1
Rating: moderate
References: #1172760 #1175155
Cross-References: CVE-2020-17489
Affected Products:
openSUSE Leap 15.2
______________________________________________________________________________
An update that solves one vulnerability and has one errata
is now available.
Description:
This update for gnome-settings-daemon, gnome-shell fixes the following
issues:
gnome-settings-daemon:
– Add support for recent UCM related changes in ALSA and PulseAudio.
(jsc#SLE-16518)
– Don’t warn when a default source or sink is missing and the PulseAudio
daemon is restarting. (jsc#SLE-16518)
– Don’t warn about starting/stopping services which don’t exist.
(bsc#1172760).
gnome-shell:
– Add support for recent UCM related changes in ALSA and PulseAudio.
(jsc#SLE-16518)
– CVE-2020-17489: reset auth prompt on vt switch before fade in in
loginDialog (bsc#1175155).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
– openSUSE Leap 15.2:
zypper in -t patch openSUSE-2020-1861=1
Package List:
– openSUSE Leap 15.2 (noarch):
gnome-settings-daemon-lang-3.34.2+0-lp152.3.3.1
gnome-shell-lang-3.34.5-lp152.2.9.1
– openSUSE Leap 15.2 (x86_64):
gnome-settings-daemon-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-debuginfo-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-debugsource-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-devel-3.34.2+0-lp152.3.3.1
gnome-shell-3.34.5-lp152.2.9.1
gnome-shell-calendar-3.34.5-lp152.2.9.1
gnome-shell-calendar-debuginfo-3.34.5-lp152.2.9.1
gnome-shell-debuginfo-3.34.5-lp152.2.9.1
gnome-shell-debugsource-3.34.5-lp152.2.9.1
gnome-shell-devel-3.34.5-lp152.2.9.1
References:
https://www.suse.com/security/cve/CVE-2020-17489.html
https://bugzilla.suse.com/1172760
https://bugzilla.suse.com/1175155
—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org