Oracle Linux 7 : gdm / and / gnome-session (ELSA-2017-2128)

medium Nessus Plugin ID 102297

Language:

Synopsis

The remote Oracle Linux host is missing a security update.

Description

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2128 advisory.

gdm [3.22.3-11]
- Add japanese translation Resolves: #1449632

[3.22.3-10]
- Add patches to try to maintain some semblance of compatibility when live upgrading between 7.3 and 7.4 Related: #1448786

[3.22.3-9]
- Make sure reauthentication is run within the user session.
Resolves:#1448209

[3.22.3-8]
- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT Resolves: #1301028

[3.22.3-7]
- Fix user switching Related: #1386862

[3.22.3-6]
- Fix indirect XDMCP Resolves: #1273156

[3.22.3-5]
- Attempt to fix po file installation Related: #1386862

[3.22.3-4]
- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance Related: #1386862

[3.22.3-3]
- Don't fall over if autologin user isn't available Resolves #1373837

[1:3.22.3-2]
- Honor anaconda's firstboot being disabled Resolves: #1226819

[3.22.3-1]
- Rebase to 3.22.3 Resolves: #1386862

[3.14.2-19]
- Add error traps around XKillClient calls, fixes regression on logout Resolves: #1377987

gnome-session [3.22.3-4]
- fix crash in fail whale Resolves: #1392970

[3.22.3-3]
- Fix the ability to disable a service from session properties Resolves: #1310975

[3.22.3-2]
- Drop gnome-xorg.desktop Related: #1386957

[3.22.3-1]
- Rebase to 3.22.3 Resolves: #1386957

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 102297

File Name: oraclelinux_ELSA-2017-2128.nasl

Version: 3.6

Type: local

Agent: unix

Family: Oracle Linux Local Security Checks

Published: 8/9/2017

Updated: 11/1/2024

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2015-7496

CVSS v3

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.8

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:oracle:linux:gnome-session-custom-session, cpe:/o:oracle:linux:7, p-cpe:/a:oracle:linux:gdm-devel, p-cpe:/a:oracle:linux:gnome-session-xsession, p-cpe:/a:oracle:linux:gnome-session, p-cpe:/a:oracle:linux:gdm

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/OracleLinux

Exploit Ease: No known exploits are available

Patch Publication Date: 8/8/2017

Vulnerability Publication Date: 11/24/2015

Reference Information

CVE: CVE-2015-7496

RHSA: 2017:2128

Detections

Analytics