SUSE-SU-2020:3132-1: moderate: Security update for gnome-settings-daemon, gnome-shell

[sle-updates at lists.suse.com]

   SUSE Security Update: Security update for gnome-settings-daemon, gnome-shell
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:3132-1
Rating:             moderate
References:         #1172760 #1175155 SLE-16518 
Cross-References:   CVE-2020-17489
Affected Products:
                    SUSE Linux Enterprise Workstation Extension 15-SP2
                    SUSE Linux Enterprise Module for Desktop Applications 15-SP2
______________________________________________________________________________

   An update that solves one vulnerability, contains one
   feature and has one errata is now available.

Description:

   This update for gnome-settings-daemon, gnome-shell fixes the following
   issues:

   gnome-settings-daemon:

   - Add support for recent UCM related changes in ALSA and PulseAudio.
     (jsc#SLE-16518)
   - Don't warn when a default source or sink is missing and the PulseAudio
     daemon is restarting. (jsc#SLE-16518)
   - Don't warn about starting/stopping services which don't exist.
     (bsc#1172760).

   gnome-shell:

   - Add support for recent UCM related changes in ALSA and PulseAudio.
     (jsc#SLE-16518)
   - CVE-2020-17489: reset auth prompt on vt switch before fade in in
     loginDialog (bsc#1175155).


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Workstation Extension 15-SP2:

      zypper in -t patch SUSE-SLE-Product-WE-15-SP2-2020-3132=1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-3132=1



Package List:

   - SUSE Linux Enterprise Workstation Extension 15-SP2 (x86_64):

      gnome-shell-calendar-3.34.5-3.13.1
      gnome-shell-calendar-debuginfo-3.34.5-3.13.1
      gnome-shell-debuginfo-3.34.5-3.13.1
      gnome-shell-debugsource-3.34.5-3.13.1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (aarch64 ppc64le s390x x86_64):

      gnome-settings-daemon-3.34.2+0-4.3.1
      gnome-settings-daemon-debuginfo-3.34.2+0-4.3.1
      gnome-settings-daemon-debugsource-3.34.2+0-4.3.1
      gnome-settings-daemon-devel-3.34.2+0-4.3.1
      gnome-shell-3.34.5-3.13.1
      gnome-shell-debuginfo-3.34.5-3.13.1
      gnome-shell-debugsource-3.34.5-3.13.1
      gnome-shell-devel-3.34.5-3.13.1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (noarch):

      gnome-settings-daemon-lang-3.34.2+0-4.3.1
      gnome-shell-lang-3.34.5-3.13.1


References:

   https://www.suse.com/security/cve/CVE-2020-17489.html
   https://bugzilla.suse.com/1172760
   https://bugzilla.suse.com/1175155