Skip to content
OpenAdvisories
Medium ELSA-2017-2128 1 CVE

Moderate: gdm and gnome-session security, bug fix, and enhancement update (Oracle Linux 7)

Published Aug 7, 2017 · Updated Aug 7, 2017

Summary

gdm
[3.22.3-11]
- Add japanese translation
Resolves: #1449632

[3.22.3-10]
- Add patches to try to maintain some semblance of compatibility
when live upgrading between 7.3 and 7.4
Related: #1448786

[3.22.3-9]
- Make sure reauthentication is run within the user
session.
Resolves:#1448209

[3.22.3-8]
- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
Resolves: #1301028

[3.22.3-7]
- Fix user switching
Related: #1386862

[3.22.3-6]
- Fix indirect XDMCP
Resolves: #1273156

[3.22.3-5]
- Attempt to fix po file installation
Related: #1386862

[3.22.3-4]
- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
Related: #1386862

[3.22.3-3]
- Don't fall over if autologin user isn't available
Resolves #1373837

[1:3.22.3-2]
- Honor anaconda's firstboot being disabled
Resolves: #1226819

[3.22.3-1]
- Rebase to 3.22.3
Resolves: #1386862

[3.14.2-19]
- Add error traps around XKillClient calls, fixes regression
on logout
Resolves: #1377987

gnome-session
[3.22.3-4]
- fix crash in fail whale
Resolves: #1392970

[3.22.3-3]
- Fix the ability to disable a service from session properties
Resolves: #1310975

[3.22.3-2]
- Drop gnome-xorg.desktop
Related: #1386957

[3.22.3-1]
- Rebase to 3.22.3
Resolves: #1386957

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 gdm 1:3.22.3-11.el7
Oracle Linux · 7 gdm-devel 1:3.22.3-11.el7
Oracle Linux · 7 gnome-session 0:3.22.3-4.el7
Oracle Linux · 7 gnome-session-custom-session 0:3.22.3-4.el7
Oracle Linux · 7 gnome-session-xsession 0:3.22.3-4.el7

Vulnerabilities 1

  • Unscored —

    GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding th…