openSUSE Security Update: Security update for gnome-settings-daemon, gnome-shell
______________________________________________________________________________

Announcement ID: openSUSE-SU-2020:1861-1
Rating: moderate
References: #1172760 #1175155
Cross-References: CVE-2020-17489
Affected Products:
openSUSE Leap 15.2
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for gnome-settings-daemon, gnome-shell fixes the following
issues:

gnome-settings-daemon:

– Add support for recent UCM related changes in ALSA and PulseAudio.
(jsc#SLE-16518)
– Don’t warn when a default source or sink is missing and the PulseAudio
daemon is restarting. (jsc#SLE-16518)
– Don’t warn about starting/stopping services which don’t exist.
(bsc#1172760).

gnome-shell:

– Add support for recent UCM related changes in ALSA and PulseAudio.
(jsc#SLE-16518)
– CVE-2020-17489: reset auth prompt on vt switch before fade in in
loginDialog (bsc#1175155).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

– openSUSE Leap 15.2:

zypper in -t patch openSUSE-2020-1861=1

Package List:

– openSUSE Leap 15.2 (noarch):

gnome-settings-daemon-lang-3.34.2+0-lp152.3.3.1
gnome-shell-lang-3.34.5-lp152.2.9.1

– openSUSE Leap 15.2 (x86_64):

gnome-settings-daemon-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-debuginfo-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-debugsource-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-devel-3.34.2+0-lp152.3.3.1
gnome-shell-3.34.5-lp152.2.9.1
gnome-shell-calendar-3.34.5-lp152.2.9.1
gnome-shell-calendar-debuginfo-3.34.5-lp152.2.9.1
gnome-shell-debuginfo-3.34.5-lp152.2.9.1
gnome-shell-debugsource-3.34.5-lp152.2.9.1
gnome-shell-devel-3.34.5-lp152.2.9.1

References:

https://www.suse.com/security/cve/CVE-2020-17489.html
https://bugzilla.suse.com/1172760
https://bugzilla.suse.com/1175155

—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org