--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2018-c785c43a8f
2018-07-08 21:44:08.567966
--------------------------------------------------------------------------------Name        : cinnamon
Product     : Fedora 28
Version     : 3.8.7
Release     : 1.fc28
URL         : https://github.com/linuxmint/cinnamon
Summary     : Window management and application launching for GNOME
Description :
Cinnamon is a Linux desktop which provides advanced
innovative features and a traditional user experience.

The desktop layout is similar to Gnome 2.
The underlying technology is forked from Gnome Shell.
The emphasis is put on making users feel at home and providing
them with an easy to use and comfortable desktop experience.

--------------------------------------------------------------------------------Update Information:

Fix CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py
GUI
--------------------------------------------------------------------------------ChangeLog:

* Thu Jul  5 2018 Leigh Scott  - 3.8.7-1
- Update to 3.8.7 release
* Fri Jun  8 2018 Leigh Scott  - 3.8.4-1
- Update to 3.8.4 release
* Mon May 21 2018 Leigh Scott  - 3.8.3-1
- Update to 3.8.3 release
* Sun May  6 2018 Leigh Scott  - 3.8.2-1
- Update to 3.8.2 release
* Sat May  5 2018 Leigh Scott  - 3.8.1-3
- Use rebased libnm patch
* Wed May  2 2018 Leigh Scott  - 3.8.1-2
- Update required versions
* Tue May  1 2018 Leigh Scott  - 3.8.1-1
- Update to 3.8.1 release
- Revert all 3.8.1 network applet changes as they conflict with the libnm patch
* Mon Apr 30 2018 Leigh Scott  - 3.8.0-4
- Fix possible crash in system tray on start up
* Sat Apr 28 2018 Leigh Scott  - 3.8.0-3
- Revert "Remove requires caribou as it has been retired (f28+)."
* Wed Apr 25 2018 Leigh Scott  - 3.8.0-2
- Remove requires caribou as it has been retired (f28+).
* Tue Apr 24 2018 Leigh Scott  - 3.8.0-1
- Update to 3.8.0 release
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1598494 - CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py GUI [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1598494
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-c785c43a8f' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XSADMZDE26IBCLBJOASR5ZX4E2OKKPVD/

Fedora 28: cinnamon Security Update

July 8, 2018
Fix CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py GUI

Summary

Cinnamon is a Linux desktop which provides advanced

innovative features and a traditional user experience.

The desktop layout is similar to Gnome 2.

The underlying technology is forked from Gnome Shell.

The emphasis is put on making users feel at home and providing

them with an easy to use and comfortable desktop experience.

Fix CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py

GUI

* Thu Jul 5 2018 Leigh Scott - 3.8.7-1

- Update to 3.8.7 release

* Fri Jun 8 2018 Leigh Scott - 3.8.4-1

- Update to 3.8.4 release

* Mon May 21 2018 Leigh Scott - 3.8.3-1

- Update to 3.8.3 release

* Sun May 6 2018 Leigh Scott - 3.8.2-1

- Update to 3.8.2 release

* Sat May 5 2018 Leigh Scott - 3.8.1-3

- Use rebased libnm patch

* Wed May 2 2018 Leigh Scott - 3.8.1-2

- Update required versions

* Tue May 1 2018 Leigh Scott - 3.8.1-1

- Update to 3.8.1 release

- Revert all 3.8.1 network applet changes as they conflict with the libnm patch

* Mon Apr 30 2018 Leigh Scott - 3.8.0-4

- Fix possible crash in system tray on start up

* Sat Apr 28 2018 Leigh Scott - 3.8.0-3

- Revert "Remove requires caribou as it has been retired (f28+)."

* Wed Apr 25 2018 Leigh Scott - 3.8.0-2

- Remove requires caribou as it has been retired (f28+).

* Tue Apr 24 2018 Leigh Scott - 3.8.0-1

- Update to 3.8.0 release

[ 1 ] Bug #1598494 - CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py GUI [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1598494

su -c 'dnf upgrade --advisory FEDORA-2018-c785c43a8f' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XSADMZDE26IBCLBJOASR5ZX4E2OKKPVD/

FEDORA-2018-c785c43a8f 2018-07-08 21:44:08.567966 Product : Fedora 28 Version : 3.8.7 Release : 1.fc28 URL : https://github.com/linuxmint/cinnamon Summary : Window management and application launching for GNOME Description : Cinnamon is a Linux desktop which provides advanced innovative features and a traditional user experience. The desktop layout is similar to Gnome 2. The underlying technology is forked from Gnome Shell. The emphasis is put on making users feel at home and providing them with an easy to use and comfortable desktop experience. Fix CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py GUI * Thu Jul 5 2018 Leigh Scott - 3.8.7-1 - Update to 3.8.7 release * Fri Jun 8 2018 Leigh Scott - 3.8.4-1 - Update to 3.8.4 release * Mon May 21 2018 Leigh Scott - 3.8.3-1 - Update to 3.8.3 release * Sun May 6 2018 Leigh Scott - 3.8.2-1 - Update to 3.8.2 release * Sat May 5 2018 Leigh Scott - 3.8.1-3 - Use rebased libnm patch * Wed May 2 2018 Leigh Scott - 3.8.1-2 - Update required versions * Tue May 1 2018 Leigh Scott - 3.8.1-1 - Update to 3.8.1 release - Revert all 3.8.1 network applet changes as they conflict with the libnm patch * Mon Apr 30 2018 Leigh Scott - 3.8.0-4 - Fix possible crash in system tray on start up * Sat Apr 28 2018 Leigh Scott - 3.8.0-3 - Revert "Remove requires caribou as it has been retired (f28+)." * Wed Apr 25 2018 Leigh Scott - 3.8.0-2 - Remove requires caribou as it has been retired (f28+). * Tue Apr 24 2018 Leigh Scott - 3.8.0-1 - Update to 3.8.0 release [ 1 ] Bug #1598494 - CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py GUI [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1598494 su -c 'dnf upgrade --advisory FEDORA-2018-c785c43a8f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XSADMZDE26IBCLBJOASR5ZX4E2OKKPVD/

Change Log

References

Update Instructions

Severity
Product : Fedora 28
Version : 3.8.7
Release : 1.fc28
URL : https://github.com/linuxmint/cinnamon
Summary : Window management and application launching for GNOME

Related News