MGASA-2023-0311 - Updated gnome-shell packages fix a security vulnerability

Publication date: 09 Nov 2023
URL: https://advisories.mageia.org/MGASA-2023-0311.html
Type: security
Affected Mageia releases: 9
CVE: CVE-2023-43090

The updated packages fix a security vulnerability:

GNOME Shell's lock screen allows an unauthenticated local user to view
windows of the locked desktop session by using keyboard shortcuts to
unlock the restricted functionality of the screenshot tool.
(CVE-2023-43090)

References:
- https://bugs.mageia.org/show_bug.cgi?id=32320
- https://ubuntu.com/security/notices/USN-6395-1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43090

SRPMS:
- 9/core/gnome-shell-44.2-1.1.mga9

Mageia 2023-0311: gnome-shell security update

The updated packages fix a security vulnerability: GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard s...

Summary

The updated packages fix a security vulnerability:
GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool. (CVE-2023-43090)

References

- https://bugs.mageia.org/show_bug.cgi?id=32320

- https://ubuntu.com/security/notices/USN-6395-1

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43090

Resolution

MGASA-2023-0311 - Updated gnome-shell packages fix a security vulnerability

SRPMS

- 9/core/gnome-shell-44.2-1.1.mga9

Severity
Publication date: 09 Nov 2023
URL: https://advisories.mageia.org/MGASA-2023-0311.html
Type: security
CVE: CVE-2023-43090

Related News