UbuntuUpdates.org

Package "gnome-shell"

Name: gnome-shell

Description:

graphical shell for the GNOME desktop
Latest version: 42.9-0ubuntu2.4
Release: jammy (22.04)
Level: security
Repository: main
Homepage: https://wiki.gnome.org/Projects/GnomeShell

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gnome-shell"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "gnome-shell" in Jammy

Repository Area Version
base main 42.0-2ubuntu1
base universe 42.0-2ubuntu1
security universe 42.9-0ubuntu2.4
updates universe 42.9-0ubuntu2.4
updates main 42.9-0ubuntu2.4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 42.9-0ubuntu2.4 2026-11-03 18:07:39 UTC

gnome-shell (42.9-0ubuntu2.4) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via OOB read in search provider icon
    - debian/patches/CVE-2026-91786.patch: shell/util: Validate
      create_pixbuf_from_data() parameters in src/shell-util.c.
    - CVE-2026-91786

 -- Marc Deslauriers Thu, 22 Oct 2026 12:53:09 -0400
Source diff to previous version
CVE-2026-91786 A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dime

Version: 42.9-0ubuntu2.2 2024-08-15 16:07:12 UTC

  gnome-shell (42.9-0ubuntu2.2) jammy-security; urgency=medium

  * SECURITY UPDATE: resource consumption via portal helper
    - debian/patches/CVE-2024-36472.patch: show notification when detecting
      captive portal in js/ui/status/network.js.
    - CVE-2024-36472

 -- Marc Deslauriers <email address hidden> Wed, 14 Aug 2024 09:55:24 -0400
Source diff to previous version
CVE-2024-36472 In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adve

Version: 42.9-0ubuntu2.1 2024-05-09 15:07:10 UTC

  gnome-shell (42.9-0ubuntu2.1) jammy-security; urgency=medium

  * Fix compatibility with glib2.0 security update
    - debian/patches/correct_expected_bus_name.patch: correct expected bus
      name for streams in js/dbusServices/screencast/screencastService.js.

 -- Marc Deslauriers <email address hidden> Tue, 07 May 2024 17:06:57 -0400


About   -   Send Feedback to @ubuntu_updates