SUSE-SU-2019:1390-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2019:1390-1

MEDIUM5.1

Security update for gnome-shell

Published May 31, 2019

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for gnome-shell fixes the following issues:

Security issue fixed:

CVE-2019-3820: Fixed a partial lock screen bypass (bsc#1124493).

Fixed bugs:

Remove sessionList of endSessionDialog for security reasons (jsc#SLE-6660).

Affected Packages

gnome-shell

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

3.20.4-77.23.1

gnome-shell-browser-plugin

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

3.20.4-77.23.1

gnome-shell-calendar

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Workstation Extension 12 SP3SUSE Linux Enterprise Workstation Extension 12 SP4

Fixed in:

3.20.4-77.23.1

gnome-shell-lang

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

3.20.4-77.23.1

gnome-shell-devel

SUSE Linux Enterprise Software Development Kit 12 SP3SUSE Linux Enterprise Software Development Kit 12 SP4

Fixed in:

3.20.4-77.23.1

References

ADVISORY

https://bugzilla.suse.com/1124493

ADVISORY

https://bugzilla.suse.com/SLE-6660

ADVISORY