Описание
Security update for gnome-shell
This update for gnome-shell fixes the following issues:
- CVE-2024-36472: Fixed portal helper automatically launched without user confirmation (bsc#1225567)
Список пакетов
SUSE Linux Enterprise Module for Desktop Applications 15 SP6
gnome-extensions-45.3-150600.5.6.1
gnome-shell-45.3-150600.5.6.1
gnome-shell-devel-45.3-150600.5.6.1
gnome-shell-lang-45.3-150600.5.6.1
SUSE Linux Enterprise Workstation Extension 15 SP6
gnome-shell-calendar-45.3-150600.5.6.1
openSUSE Leap 15.6
gnome-extensions-45.3-150600.5.6.1
gnome-shell-45.3-150600.5.6.1
gnome-shell-calendar-45.3-150600.5.6.1
gnome-shell-devel-45.3-150600.5.6.1
gnome-shell-lang-45.3-150600.5.6.1
Ссылки
- Link for SUSE-SU-2024:2576-1
- E-Mail link for SUSE-SU-2024:2576-1
- SUSE Security Ratings
- SUSE Bug 1215485
- SUSE Bug 1225567
- SUSE CVE CVE-2023-43090 page
- SUSE CVE CVE-2024-36472 page
Описание
A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.
Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:gnome-extensions-45.3-150600.5.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:gnome-shell-45.3-150600.5.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:gnome-shell-devel-45.3-150600.5.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:gnome-shell-lang-45.3-150600.5.6.1
Ссылки
- CVE-2023-43090
- SUSE Bug 1215485
Описание
In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.
Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:gnome-extensions-45.3-150600.5.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:gnome-shell-45.3-150600.5.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:gnome-shell-devel-45.3-150600.5.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6:gnome-shell-lang-45.3-150600.5.6.1
Ссылки
- CVE-2024-36472
- SUSE Bug 1225567