Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-3820: It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions. 1669391: CVE-2019-3820 gnome-shell: partial lock screen bypass
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | gnome-shell | 0:3.28.3-24.amzn2 |
| Amazon Linux · 2 | gnome-shell-debuginfo | 0:3.28.3-24.amzn2 |
Vulnerabilities 1
-
Medium 4.8
It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actio…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-3820.html