USN-7052-1: GNOME Shell vulnerabilities
It was discovered that GNOME Shell mishandled extensions that fail to reload, possibly leading to extensions staying enabled on the lock screen. An attacker could possibly use this issue to launch applications, view sensitive information, or execute arbitrary commands. (CVE-2017-8288) It was discovered that the GNOME Shell incorrectly handled certain keyboard inputs. An attacker could possibly use this issue to invoke keyboard shortcuts, and potentially other actions while the workstation was locked. (CVE-2019-3820)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7052-1?
USN-7052-1 addresses a potential security issue with GNOME Shell that may allow attackers to access sensitive information.
How do I fix USN-7052-1?
To fix USN-7052-1, update GNOME Shell to version 3.18.5-0ubuntu0.3+esm1 or later on Ubuntu 16.04.
Which versions of GNOME Shell are affected by USN-7052-1?
GNOME Shell versions prior to 3.18.5-0ubuntu0.3+esm1 on Ubuntu 16.04 are affected by USN-7052-1.
What are the implications of USN-7052-1?
If not addressed, USN-7052-1 could allow an attacker to launch applications, view sensitive data, or execute arbitrary commands.
Who is impacted by USN-7052-1?
Users running Ubuntu 16.04 with vulnerable versions of GNOME Shell may be impacted by USN-7052-1.