OESA-2021-1403

Dashboard / Vulnerabilities / OESA-2021-1403

OESA-2021-1403

Summary: gnome-shell security update

Details: The GNOME Shell redefines user interactions with the GNOME desktop. In particular, it offers new paradigms for launching applications, accessing documents, and organizing open windows in GNOME. Later, it will introduce a new applets eco-system and offer new solutions for other desktop features, such as notifications and contacts management. The GNOME Shell is intended to replace functions handled by the GNOME Panel and by the window manager in previous versions of GNOME. The GNOME Shell has rich visual effects enabled by new graphical technologies. Security Fix(es): It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.(CVE-2019-3820)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1403, https://nvd.nist.gov/vuln/detail/CVE-2019-3820