RHSA-2024:9114: Moderate: gnome-shell and gnome-shell-extensions security update
First published: Tue Nov 12 2024(Updated: )
GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts. <br>Security Fix(es):<br><li> gnome-shell: code execution in portal helper (CVE-2024-36472)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Red Hat Enterprise Linux for x86_64 | ||
| Red Hat Red Hat Enterprise Linux for IBM z Systems | ||
| Red Hat Red Hat Enterprise Linux for ARM 64 | ||
| Red Hat Red Hat Enterprise Linux for Power, little endian | ||
| redhat/gnome-shell | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell-extensions | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-classic-session | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell-debuginfo | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell-debugsource | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell-extension-apps-menu | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-auto-move-windows | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-classification-banner | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-common | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-custom-menu | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-dash-to-dock | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-dash-to-panel | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-desktop-icons | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-drive-menu | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-gesture-inhibitor | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-heads-up-display | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-launch-new-instance | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-native-window-placement | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-panel-favorites | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-places-menu | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-screenshot-window-sizer | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-top-icons | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-updates-dialog | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-user-theme | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-window-list | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-extension-workspace-indicator | <40.7-19.el9 | 40.7-19.el9 |
| redhat/gnome-shell-debuginfo | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell-debugsource | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell-debuginfo | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell-debugsource | <40.10-21.el9 | 40.10-21.el9 |
| redhat/gnome-shell | <40.10-21.el9.aa | 40.10-21.el9.aa |
| redhat/gnome-shell-debuginfo | <40.10-21.el9.aa | 40.10-21.el9.aa |
| redhat/gnome-shell-debugsource | <40.10-21.el9.aa | 40.10-21.el9.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2024:9114 (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=2283750
- https://issues.redhat.com/browse/RHEL-22713
- https://issues.redhat.com/browse/RHEL-26989
- https://issues.redhat.com/browse/RHEL-24713
- https://issues.redhat.com/browse/RHEL-25016
- https://issues.redhat.com/browse/RHEL-2031
- https://issues.redhat.com/browse/RHEL-43545
- https://access.redhat.com/security/updates/classification/#moderate
- https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
- collector/redhat-errata-latest
- source/Red Hat
- anchor-id/RHSA-2024:9114
- agent/software-canonical-lookup
- agent/severity
- agent/type
- agent/references
- agent/last-modified-date
- agent/remedy
- agent/title
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- collector/redhat-errata
- vendor/red hat
- canonical/red hat red hat enterprise linux for x86_64
- canonical/red hat red hat enterprise linux for ibm z systems
- canonical/red hat red hat enterprise linux for arm 64
- canonical/red hat red hat enterprise linux for power, little endian
- package-manager/redhat