openSUSE Security Update: Security update for gnome-settings-daemon, gnome-shell ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1861-1 Rating: moderate References: #1172760 #1175155 Cross-References: CVE-2020-17489 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for gnome-settings-daemon, gnome-shell fixes the following issues: gnome-settings-daemon: - Add support for recent UCM related changes in ALSA and PulseAudio. (jsc#SLE-16518) - Don't warn when a default source or sink is missing and the PulseAudio daemon is restarting. (jsc#SLE-16518) - Don't warn about starting/stopping services which don't exist. (bsc#1172760). gnome-shell: - Add support for recent UCM related changes in ALSA and PulseAudio. (jsc#SLE-16518) - CVE-2020-17489: reset auth prompt on vt switch before fade in in loginDialog (bsc#1175155). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1861=1 Package List: - openSUSE Leap 15.2 (noarch): gnome-settings-daemon-lang-3.34.2+0-lp152.3.3.1 gnome-shell-lang-3.34.5-lp152.2.9.1 - openSUSE Leap 15.2 (x86_64): gnome-settings-daemon-3.34.2+0-lp152.3.3.1 gnome-settings-daemon-debuginfo-3.34.2+0-lp152.3.3.1 gnome-settings-daemon-debugsource-3.34.2+0-lp152.3.3.1 gnome-settings-daemon-devel-3.34.2+0-lp152.3.3.1 gnome-shell-3.34.5-lp152.2.9.1 gnome-shell-calendar-3.34.5-lp152.2.9.1 gnome-shell-calendar-debuginfo-3.34.5-lp152.2.9.1 gnome-shell-debuginfo-3.34.5-lp152.2.9.1 gnome-shell-debugsource-3.34.5-lp152.2.9.1 gnome-shell-devel-3.34.5-lp152.2.9.1 References: https://www.suse.com/security/cve/CVE-2020-17489.html https://bugzilla.suse.com/1172760 https://bugzilla.suse.com/1175155