USN-3966-1: GNOME Shell vulnerability

6 May 2019

gnome-shell vulnerability

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 18.10
  • Ubuntu 18.04 LTS

Summary

GNOME Shell could be made to execute keyboard shortcuts and other actions while the workstation was locked.

Software Description

  • gnome-shell - graphical shell for the GNOME desktop

Details

It was discovered that the GNOME Shell incorrectly handled certain keyboard inputs. An attacker could possibly use this issue to invoke keyboard shortcuts, and potentially other actions while the workstation was locked.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.10
gnome-shell - 3.30.2-0ubuntu1.18.10.2
Ubuntu 18.04 LTS
gnome-shell - 3.28.3+git20190124-0ubuntu18.04.2

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make all the necessary changes.

References