USN-8971-1: GNOME Shell vulnerability
Published Nov 3, 2026
·Updated
It was discovered that GNOME Shell did not properly validate icon dimensions when processing icons from a remote search provider. An attacker could possibly use this issue to cause GNOME Shell to crash, resulting in a denial of service, or expose sensitive information from memory.
Affected Software
9 affected componentsFixes available
All of the following
ubuntu/gnome-shell<50.1-0ubuntu1.5
50.1-0ubuntu1.5
Ubuntu Ubuntu=26.04
All of the following
ubuntu/gnome-shell<46.0-0ubuntu6~24.04.17
46.0-0ubuntu6~24.04.17
Ubuntu Ubuntu=24.04
All of the following
ubuntu/gnome-shell<42.9-0ubuntu2.4
42.9-0ubuntu2.4
Ubuntu Ubuntu=22.04
ubuntu/gnome-shell<42.9-0ubuntu2.4
42.9-0ubuntu2.4
ubuntu/gnome-shell<46.0-0ubuntu6~24.04.17
46.0-0ubuntu6~24.04.17
ubuntu/gnome-shell<50.1-0ubuntu1.5
50.1-0ubuntu1.5
Event History
Nov 3, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·02:13 PM
Data Sourced
via OSV·02:13 PM
DescriptionAffected Software