Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1390-1

Опубликовано: 31 мая 2019
Источник: suse-cvrf

Описание

Security update for gnome-shell

This update for gnome-shell fixes the following issues:

Security issue fixed:

  • CVE-2019-3820: Fixed a partial lock screen bypass (bsc#1124493).

Fixed bugs:

  • Remove sessionList of endSessionDialog for security reasons (jsc#SLE-6660).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
gnome-shell-3.20.4-77.23.1
gnome-shell-browser-plugin-3.20.4-77.23.1
gnome-shell-calendar-3.20.4-77.23.1
gnome-shell-lang-3.20.4-77.23.1
SUSE Linux Enterprise Desktop 12 SP4
gnome-shell-3.20.4-77.23.1
gnome-shell-browser-plugin-3.20.4-77.23.1
gnome-shell-calendar-3.20.4-77.23.1
gnome-shell-lang-3.20.4-77.23.1
SUSE Linux Enterprise Server 12 SP3
gnome-shell-3.20.4-77.23.1
gnome-shell-browser-plugin-3.20.4-77.23.1
gnome-shell-lang-3.20.4-77.23.1
SUSE Linux Enterprise Server 12 SP4
gnome-shell-3.20.4-77.23.1
gnome-shell-browser-plugin-3.20.4-77.23.1
gnome-shell-lang-3.20.4-77.23.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
gnome-shell-3.20.4-77.23.1
gnome-shell-browser-plugin-3.20.4-77.23.1
gnome-shell-lang-3.20.4-77.23.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
gnome-shell-3.20.4-77.23.1
gnome-shell-browser-plugin-3.20.4-77.23.1
gnome-shell-lang-3.20.4-77.23.1
SUSE Linux Enterprise Software Development Kit 12 SP3
gnome-shell-devel-3.20.4-77.23.1
SUSE Linux Enterprise Software Development Kit 12 SP4
gnome-shell-devel-3.20.4-77.23.1
SUSE Linux Enterprise Workstation Extension 12 SP3
gnome-shell-calendar-3.20.4-77.23.1
SUSE Linux Enterprise Workstation Extension 12 SP4
gnome-shell-calendar-3.20.4-77.23.1

Ссылки

Описание

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:gnome-shell-3.20.4-77.23.1
SUSE Linux Enterprise Desktop 12 SP3:gnome-shell-browser-plugin-3.20.4-77.23.1
SUSE Linux Enterprise Desktop 12 SP3:gnome-shell-calendar-3.20.4-77.23.1
SUSE Linux Enterprise Desktop 12 SP3:gnome-shell-lang-3.20.4-77.23.1
Ссылки