UbuntuUpdates.org

Package "gnome-shell-common"

Name: gnome-shell-common

Description:

common files for the GNOME graphical shell
Latest version: 46.0-0ubuntu6~24.04.3
Release: noble (24.04)
Level: security
Repository: main
Head package: gnome-shell
Homepage: https://wiki.gnome.org/Projects/GnomeShell

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gnome-shell-common"

All arch deb package
APT INSTALL

Other versions of "gnome-shell-common" in Noble

Repository Area Version
base main 46.0-0ubuntu5
updates main 46.0-0ubuntu6~24.04.5
proposed main 46.0-0ubuntu6~24.04.6

Changelog

Version: 46.0-0ubuntu6~24.04.3 2024-08-15 16:07:16 UTC

  gnome-shell (46.0-0ubuntu6~24.04.3) noble-security; urgency=medium

  * SECURITY UPDATE: resource consumption via portal helper
    - debian/patches/CVE-2024-36472-1.patch: use default_size instead of
      set_size_request for size in js/portalHelper/main.js.
    - debian/patches/CVE-2024-36472-2.patch: split out CaptivePortalHandler
      class in js/ui/status/network.js.
    - debian/patches/CVE-2024-36472-3.patch: show notification when
      detecting captive portal in js/ui/status/network.js.
    - debian/patches/CVE-2024-36472-4.patch: add option to disable
      portal-helper in data/icons/meson.build, data/meson.build,
      js/meson.build, js/misc/config.js.in, js/misc/meson.build,
      js/ui/status/network.js, meson.build, meson_options.txt,
      src/meson.build.
    - debian/rules: build with portal_helper=false to use the default
      browser instead of the embedded webkit2gtk browser.
    - CVE-2024-36472

 -- Marc Deslauriers <email address hidden> Wed, 14 Aug 2024 08:27:56 -0400
Source diff to previous version
CVE-2024-36472 In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adve

Version: 46.0-0ubuntu5.1 2024-05-09 15:07:19 UTC

  gnome-shell (46.0-0ubuntu5.1) noble-security; urgency=medium

  * Fix compatibility with glib2.0 security update
    - debian/patches/correct_expected_bus_name.patch: correct expected bus
      name for streams in js/dbusServices/screencast/screencastService.js.

 -- Marc Deslauriers <email address hidden> Tue, 07 May 2024 17:03:32 -0400


About   -   Send Feedback to @ubuntu_updates