Описание
Security update for gnome-shell
This update for gnome-shell fixes the following issues:
Security issue fixed:
- CVE-2019-3820: Fixed a partial lock screen bypass (bsc#1124493).
Список пакетов
SUSE Linux Enterprise Module for Desktop Applications 15
gnome-shell-3.26.2+20180130.0d9c74212-4.19.2
gnome-shell-devel-3.26.2+20180130.0d9c74212-4.19.2
gnome-shell-lang-3.26.2+20180130.0d9c74212-4.19.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
gnome-shell-3.26.2+20180130.0d9c74212-4.19.2
gnome-shell-devel-3.26.2+20180130.0d9c74212-4.19.2
gnome-shell-lang-3.26.2+20180130.0d9c74212-4.19.2
SUSE Linux Enterprise Workstation Extension 15
gnome-shell-calendar-3.26.2+20180130.0d9c74212-4.19.2
SUSE Linux Enterprise Workstation Extension 15 SP1
gnome-shell-calendar-3.26.2+20180130.0d9c74212-4.19.2
Ссылки
- Link for SUSE-SU-2019:1459-1
- E-Mail link for SUSE-SU-2019:1459-1
- SUSE Security Ratings
- SUSE Bug 1124493
- SUSE CVE CVE-2019-3820 page
Описание
It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.
Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP1:gnome-shell-3.26.2+20180130.0d9c74212-4.19.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP1:gnome-shell-devel-3.26.2+20180130.0d9c74212-4.19.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP1:gnome-shell-lang-3.26.2+20180130.0d9c74212-4.19.2
SUSE Linux Enterprise Module for Desktop Applications 15:gnome-shell-3.26.2+20180130.0d9c74212-4.19.2
Ссылки
- CVE-2019-3820
- SUSE Bug 1124493