Lucene search

K
mageiaGentoo FoundationMGASA-2024-0314
HistorySep 27, 2024 - 4:30 a.m.

Updated gnome-shell packages fix security vulnerability

2024-09-2704:30:52
Gentoo Foundation
advisories.mageia.org
5
gnome shell
security vulnerability
portal helper
network responses
adversary
javascript code
resource consumption
cve-2024-36472
unix

AI Score

6.6

Confidence

Low

In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code’s behavior. (CVE-2024-36472)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchgnome-shell< 44.2-1.2gnome-shell-44.2-1.2.mga9