USN-7052-1: GNOME Shell vulnerabilities
3 October 2024
Several security issues were fixed in GNOME Shell.
Releases
Packages
- gnome-shell - graphical shell for the GNOME desktop
Details
It was discovered that GNOME Shell mishandled extensions that fail to
reload, possibly leading to extensions staying enabled on the lock screen.
An attacker could possibly use this issue to launch applications, view
sensitive information, or execute arbitrary commands. (CVE-2017-8288)
It was discovered that the GNOME Shell incorrectly handled certain
keyboard inputs. An attacker could possibly use this issue to invoke
keyboard shortcuts, and potentially other actions while the workstation
was locked. (CVE-2019-3820)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
gnome-shell
-
3.18.5-0ubuntu0.3+esm1
Available with Ubuntu Pro
After a standard system update you need to restart your session to make all
the necessary changes.
References
Related notices
- USN-3966-1: gnome-shell-common, gnome-shell