[USN-7052-1] GNOME Shell vulnerabilities

-----BEGIN PGP SIGNATURE-----
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=NVoL
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7052-1
October 03, 2024

gnome-shell vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in GNOME Shell.

Software Description:
- gnome-shell: graphical shell for the GNOME desktop

Details:

It was discovered that GNOME Shell mishandled extensions that fail to
reload, possibly leading to extensions staying enabled on the lock screen.
An attacker could possibly use this issue to launch applications, view
sensitive information, or execute arbitrary commands. (CVE-2017-8288)

It was discovered that the GNOME Shell incorrectly handled certain
keyboard inputs. An attacker could possibly use this issue to invoke
keyboard shortcuts, and potentially other actions while the workstation
was locked. (CVE-2019-3820)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  gnome-shell                     3.18.5-0ubuntu0.3+esm1
                                  Available with Ubuntu Pro

After a standard system update you need to restart your session to make all
the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7052-1
  CVE-2017-8288, CVE-2019-3820