Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Ubuntu 24.04 USN-6963-1 Moderate: gnome-shell Network Risk

ubuntu
Calendar Grey August 15, 2024
Dist Ubuntu Esm H88
Ubuntu's GNOME Shell may expose users to unauthorized network connections; essential security update required. Discover further details.
GNOME Shell could allow unintended access to network services.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: GNOME Shell could allow unintended access to network services. Software Description: - gnome-shell: graphical shell for the GNOME desktop Details: It was discovered that GNOME Shell incorrectly opened the portal helper automatically when detecting a captive network portal. A remote attacker could possibly use this issue to load arbitrary web pages containing JavaScript, leading to resource consumption or other attacks.

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS gnome-shell 46.0-0ubuntu6~24.04.3 Ubuntu 22.04 LTS gnome-shell 42.9-0ubuntu2.2 Ubuntu 20.04 LTS gnome-shell 3.36.9-0ubuntu0.20.04.4 After a standard system update you need to restart your session to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6963-1

CVE-2024-36472

Ubuntu Security Notice USN-6963-1

Package Information

https://launchpad.net/ubuntu/+source/gnome-shell/46.0-0ubuntu6~24.04.3 https://launchpad.net/ubuntu/+source/gnome-shell/42.9-0ubuntu2.2 https://launchpad.net/ubuntu/+source/gnome-shell/3.36.9-0ubuntu0.20.04.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here