openSUSE-SU-2019:0310-1

    Dashboard / Vulnerabilities / openSUSE-SU-2019:0310-1

    openSUSE-SU-2019:0310-1

    Published: 23 Mar 2019Last Modified: 4 Feb 2026
    Upstream:
    CVE-2019-3825
    Aliases:
    CVE-2019-3825

    Summary: Security update for gdm

    Details: This update for gdm fixes the following issues: Security issue fixed: - CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled (bsc#1124628). Other issues fixed: - GLX applications do not work well when the proprietary nvidia driver is used with a wayland session. Because of that this update disables wayland on that hardware (bsc#1112578). - Fixed an issue where gdm restart fails to kill user processes (bsc#1112294 and bsc#1113245). - Fixed a System halt in the screen with message 'End of ORACLE section' (bsc#1120307). - Fixed an issue which did not allow the returning to text console when gdm is stopped (bsc#1113700). - Fixed an issue which was causing system hang during the load of gdm (bsc#1112578). This update was imported from the SUSE:SLE-15:Update update project.

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/HFWYPRWLWQRK5AIC6KEJAE4KYRW7NG5K/#HFWYPRWLWQRK5AIC6KEJAE4KYRW7NG5K, https://bugzilla.suse.com/1112294, https://bugzilla.suse.com/1112578, https://bugzilla.suse.com/1113245, https://bugzilla.suse.com/1113700, https://bugzilla.suse.com/1120307, https://bugzilla.suse.com/1124628, https://www.suse.com/security/cve/CVE-2019-3825

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High