USN-3966-1: GNOME Shell vulnerability

06 May 2019

GNOME Shell could be made to execute keyboard shortcuts and other actions while the workstation was locked.

Releases

Packages

  • gnome-shell - graphical shell for the GNOME desktop

Details

It was discovered that the GNOME Shell incorrectly handled certain keyboard inputs.
An attacker could possibly use this issue to invoke keyboard shortcuts, and potentially
other actions while the workstation was locked.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.10
Ubuntu 18.04

After a standard system update you need to reboot your computer to make
all the necessary changes.

References