A gnome-settings-daemon, gnome-shell security update has been released for openSUSE Leap 15.2.

security-announce: openSUSE-SU-2020:1861-1: moderate: Security update for gnome-settings-daemon, gnome-shell

openSUSE Security Update: Security update for gnome-settings-daemon, gnome-shell
______________________________________________________________________________

Announcement ID: openSUSE-SU-2020:1861-1
Rating: moderate
References: #1172760 #1175155
Cross-References: CVE-2020-17489
Affected Products:
openSUSE Leap 15.2
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for gnome-settings-daemon, gnome-shell fixes the following
issues:

gnome-settings-daemon:

- Add support for recent UCM related changes in ALSA and PulseAudio.
(jsc#SLE-16518)
- Don't warn when a default source or sink is missing and the PulseAudio
daemon is restarting. (jsc#SLE-16518)
- Don't warn about starting/stopping services which don't exist.
(bsc#1172760).

gnome-shell:

- Add support for recent UCM related changes in ALSA and PulseAudio.
(jsc#SLE-16518)
- CVE-2020-17489: reset auth prompt on vt switch before fade in in
loginDialog (bsc#1175155).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.2:

zypper in -t patch openSUSE-2020-1861=1


Package List:

- openSUSE Leap 15.2 (noarch):

gnome-settings-daemon-lang-3.34.2+0-lp152.3.3.1
gnome-shell-lang-3.34.5-lp152.2.9.1

- openSUSE Leap 15.2 (x86_64):

gnome-settings-daemon-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-debuginfo-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-debugsource-3.34.2+0-lp152.3.3.1
gnome-settings-daemon-devel-3.34.2+0-lp152.3.3.1
gnome-shell-3.34.5-lp152.2.9.1
gnome-shell-calendar-3.34.5-lp152.2.9.1
gnome-shell-calendar-debuginfo-3.34.5-lp152.2.9.1
gnome-shell-debuginfo-3.34.5-lp152.2.9.1
gnome-shell-debugsource-3.34.5-lp152.2.9.1
gnome-shell-devel-3.34.5-lp152.2.9.1

References:

  https://www.suse.com/security/cve/CVE-2020-17489.html
  https://bugzilla.suse.com/1172760
  https://bugzilla.suse.com/1175155