Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:0310-1

Опубликовано: 23 мар. 2019
Источник: suse-cvrf

Описание

Security update for gdm

This update for gdm fixes the following issues:

Security issue fixed:

  • CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled (bsc#1124628).

Other issues fixed:

  • GLX applications do not work well when the proprietary nvidia driver is used with a wayland session. Because of that this update disables wayland on that hardware (bsc#1112578).
  • Fixed an issue where gdm restart fails to kill user processes (bsc#1112294 and bsc#1113245).
  • Fixed a System halt in the screen with message 'End of ORACLE section' (bsc#1120307).
  • Fixed an issue which did not allow the returning to text console when gdm is stopped (bsc#1113700).
  • Fixed an issue which was causing system hang during the load of gdm (bsc#1112578).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
gdm-3.26.2.1-lp150.11.9.1
gdm-branding-upstream-3.26.2.1-lp150.11.9.1
gdm-devel-3.26.2.1-lp150.11.9.1
gdm-lang-3.26.2.1-lp150.11.9.1
gdmflexiserver-3.26.2.1-lp150.11.9.1
libgdm1-3.26.2.1-lp150.11.9.1
typelib-1_0-Gdm-1_0-3.26.2.1-lp150.11.9.1

Ссылки

Описание

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

Затронутые продукты
openSUSE Leap 15.0:gdm-3.26.2.1-lp150.11.9.1
openSUSE Leap 15.0:gdm-branding-upstream-3.26.2.1-lp150.11.9.1
openSUSE Leap 15.0:gdm-devel-3.26.2.1-lp150.11.9.1
openSUSE Leap 15.0:gdm-lang-3.26.2.1-lp150.11.9.1
Ссылки
Уязвимость openSUSE-SU-2019:0310-1